2018 


r 




• ! 



f 

MOST 


YWI 

I CP/I 

DELY US 

I EXAM REV 

n n n n ■■ nvo 

i“j] 

k 

ii 

A 


Wiley 

C PAexce I 


EXAM REVIEW 

STUDY GUIDE 


AUD 


AUDITING AND ATTESTATION 




O Current Assignment 


Inputs and Hierarchy 


00:11:30 00:15:4$ : 9S0b 


Syltabus AiUetAMn^re I CKwais 


Cnnee 8« 


Your study 
the Wiley 


Wiley CPAf'xLol 


I- Woltorae 



2M)*/< 

100% Q 


•’ Fra'n<WDri<,OvervtnvandSt*t*flitnt$ 



100% 

90% 1^ 


A»iignm»H7S» • 


Dw 

EftTVog VsurDiM 



2. DIagnustk Aunsmtnt 

V3I/:016 

»/l/2016 

S7:S2 00‘.$2 

90 e 


•- Fln<iieloli>4<MiA)li>tMiMaid>Beud(FA$B) 

U,$-SKUiKl»an>ieichanc«Cominl$slaii(SC<) 

16. S6C-M«*i>dStindaid-ScR>i>gPioc«is 

17, SEC fl<po>tingl)*<]uir«m«nls 

»/9/ll>16 

V9/M16 

W/1016 

»/l«/I016 

2»:S$ 

11:31 

- ; 

c:-j ■ 



PrDfrett ' s Crad» 



The Table of Contents in this Study Guide perfectly 


matches the Syllabus in the Wiley CPAexcel Online 


Course. Upgrade your review with video lectures, 


multiple choice questions, task-based simulations. 


practice exams and more. 











Take a Bite Today with our 14 Day Free Trial — efficientlearning.com/cpa/trial 


MyMtrtu 


Ult tOAssecHn«flts 








A»«inn«A> 


Complete Each Lesson in 30-45 minutes 
Video, Text, Assessment in Each Lesson 








to Pass is Waiting 


Your 



YourCPA Exam Plan 


i 


CPA kept 9 

l^lo^v ptAfi. 6 yours fiorv fay foBowm$ the «epstt1w^«<Wtk to vies?Mr(ec»wr«(^jfHf pti'i. 




Stepl 

Step 2 

Step3of3 


tc8«nth« wd«f you KB 

ssywtfpcamAteen 49Ku or 

Tr^ ut &<e Wx to stmfr 


iota 




FAD 

■Em^H toBMeevanpii 

Crewe «ffwe KettWe turn ptiA (y 

Atrifautiri (twfy Unt< ecfm«CYer»i 


. AUB ■1 


$oeKtior>(><M|r 

OHomXy 
’ T*ts6»f 

SW««Ki4w 


FEC 


1 ffWoy 

OStuvdty 






sec 


i j ' :'; 




OrM-.i-* 'owpiTrii'';'!'^' '■ 1 ■' 

•0«Hi}>U 4M04t 






to fa 
of 10 


Set Your Exam Plan with our 14 Day Free Trial efficientlearning.com/cpa/trial 



























This! 


SSBSBSB 



mSSSBIBSB 


The Wiley CPAexcel comprehensive study materials are truly exceptional. 

Being able to listen to the video lectures and having access to the professor mentoring 
made the learning process a little more interactive and effective. 

— Merike H, Arlington, VA 


I used Wiley CPAexcel exclusively and was able to pass all four sections on the first try. 
The material they provide is very thorough and helped me to feel confident on exam day. 
The iPhone app was great and allowed me to go through practice questions at any time. 

— Aaron J, New Canaan, CT 


I passed all four sections of the CPA Exam on my first attempt and feel that 
Wiley CPAexcel contributed a great deal to my success. Wiley CPAexcel’s Bite-Sized 
Lessons break the voluminous CPA Exam material into small, manageable pieces. 

— Jason R, Emporia, KS 


The video lectures, study texts, and various tools available enabled me 
to efficiently and effectively focus on weak areas In my review. 

— Chris O, Tamuning, Guam 




efficientlea 




Wiley CPAexcel® Exam Review 

STUDY 

GUIDE 


2018 




Wil@y CPAexcei® Exam Review 

STUDY 

GUIDE 

2018 


AUDITING AND ATTESTATION 


Donald E.Tidrick, Ph.D, CPA, CMA, CIA 
Robert A. Prentice, J.D. 




Cover image: © jeremykramerdesign/IStockphoto 
Cover design: Wiley 

Copyright © 2018 by John Wiley & Sons, Inc. All rights reserved. 

Published by John Wiley & Sons, Inc., Hoboken, New Jersey. 

Published simultaneously in Canada. 

No part of this publication may be reproduced, stored In a retrieval system, or transmitted in any form 
or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as 
permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior 
written permission of the Publisher, or authorization through payment of the appropriate per-copy 
fee to the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, 
fax (978) 646-8600, or on the Web at www.copyrlght.com. Requests to the Publisher for permission should 
be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, 
(201) 748-6011, fax (201) 748-6008, or online at httpV/www.wlley.com/go/permissions. 

Limit of Liability/Disclaimer of Warranty: While the publisher and author have used their best efforts 
in preparing this book, they make no representations or warranties with respect to the accuracy 
or completeness of the contents of this book and specifically disclaim any implied warranties of 
merchantability or fitness for a particular purpose. No warranty may be created or extended by sales 
representatives or written sales materials. The advice and strategies contained herein may not be suitable 
for your situation. You should consult with a professional where appropriate. Neither the publisher nor 
author shall be liable for any loss of profit or any other commercial damages, including but not limited to 
special, incidental, consequential, or other damages. 

For general information on our other products and services or for technical support, please contact our 
Customer Care Department within the United States at (800) 762-2974, outside the United States at 
(317) 572-3993 or fax (317) 572-4002. 

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material 
included with standard print versions of this book may not be Included in e-books or in print-on-demand. 
If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may 
download this materia! at http://booksupport.wlley.com. For more information about Wiley products, visit 
www.wiiey.com. 

ISBN 9781119480679 

ISBN 9781119480686 (ePDF); ISBN 9781119480662 (ePub) 

Printed in the United States of America. 

10 987654321 



Conten' 


About the Authors ix 

About the Auditing and Attestation Professors x 

Welcome to Auditing and Attestation xi 

Ethics, Professional Responsibilities, and General Principles 1 

AlCPA Code of Professional Conduct 2 

Introduction and Preface 2 

Members in Public Practice 5 

MIPPs Introduction and Conceptual Framework 5 

MIPPs Nonindependence Rules 7 

Conflicts of interest, Directorships, and Gifts 7 

Reporting Income and Subordination of Judgment 9 

Advocacy, Third-Party Service Providers (TSPs), General Standards, and Accounting Principles 10 
Discreditable Acts 12 

Fees 14 

Advertising and Confidentiality 16 

Form of Organization and Names 18 

MIPPs Independence Rules 20 

Introduction to MIPPs Independence Rules 20 

Network Firms and Affiliates 22 

Reissues, Engagement Letters, ADR, and Unpaid Fees 24 

Financial Interests 25 

Overview and Unsolicited Financial Interests 25 

Mutual Funds and Retirement Plans 27 

Partnerships, 529s,Trust and Estates, Employee Benefit Plans 29 

Depository Accounts, Brokerage Accounts, and Insurance Policies 31 

Loans, Leases, and Business Relationships 32 

Family Relationships 34 

Employment Relationships 36 

Current Employment 36 

Subsequent Employment 38 

Other Associations and Relationships 40 

Nonaudit Services 42 

Code Provisions 42 

Specific Services 45 

Members in Business 51 

Other Members 54 

Requirements of SEC and PCAOB 55 

Securities and Exchange Commission (SEC) 55 

Public Company Accounting Oversight Board (PCAOB) 61 

Requirements of GAO and DOL 64 

Government Accountability Office (GAO) 64 

Department of Labor (DOL) 72 

Assessing Risk and Developing a Planned Response 75 

Financial Statement Audits 76 

Accounting vs. Auditing 76 

GAAS and Principles 78 

Professional Standards 80 

Quality Control Standards (SQCS) 82 

Overview of Audit Process 84 

Overview of Auditor's Report 85 

Different Types of Engagements 89 

PCAOB Responsibilities 90 

PCAOB on Engagement Quality Review 92 


Contents 


Planning Activities 94 

Pre-Engagement Planning Issues 94 

Planning and Supervision 99 

Materiality 101 

Audit Risk 103 

Analytical Procedures 106 

Detecting Fraud 108 

Fraud: Evaluation and Communication 113 

Detecting lllega} Acts 115 

Using the Work of a "Specialist" 117 

Required Communications with Those Charged with Governance 120 

PCAOB on Communications with Audit Committees 123 

internal Control—Concepts and Standards 126 

Obtaining an Understanding of Interna! Control 126 

Evaluating Internal Control 128 

Assessing Control Risk Under AlCPA Standards 131 

Performing Procedures In Response to Assessed Risks 135 

Required Communications 138 

Using the Work of an Internal Audit Function 141 

Performing Further Procedures and Obtaining Evidence 145 

Internal Control: Transaction Cycles 146 

Specific Transaction Cycles 146 

Revenue/Receipts—Sales 148 

Revenue/Receipts—Cash 150 

Expenditures/Disbursements 152 

Payroll Cycle 155 

Miscellaneous Cycles 157 

Audit Evidence: Concepts and Standards 159 

Overview of Substantive Procedures 159 

The Nature of Evidence 163 

Assertions and Types of Audit Procedures 167 

PCAOB Risk Assessment Audit Standards 170 

Evaluation of Misstatements Identified During the Audit 174 

Audit Documentation 176 

PCAOB on Audit Documentation 180 

Confirmation 182 

Accounting Estimates 184 

Fair Value Estimates 186 

Lawyer's Letters 188 

Management Representations Letters 191 

Related-Party Issues 194 

PCAOB on Related Parties 197 

Subsequent Events and Related Issues 200 

Going Concern Issues 203 

Audit Evidence: Specific Audit Areas 207 

Introduction to Auditing Individual Areas 207 

Cash 209 

Accounts Receivable 212 

Inventory 214 

Investments in Securities and Derivative Instruments 217 

Fixed Assets 220 

Current Liabilities 221 

Long-Term Liabilities 223 

Stockholders' Equity 224 

Payroll 225 

Audit Sampling 227 

Introduction to Sampling 227 

Attributes Sampling 229 

vi 



Contents 


Variables Sampling 231 

Probability-Proportionai-to-Size (PPS) Samplirtg 235 

Example Problems 237 

Difference Estimation Problem 237 

Difference Estimation Solution 238 

Ratio Estimation Problem 239 

Ratio Estimation Solution 240 

MPU Estimation Problem 241 

MPU Estimation Solution 242 

PPS Sampling Problem 243 

PPS Sampling Solution 244 

IT (Computer) Auditing 245 

IT Controls—General Controls 245 

IT Controls—Application Controls 247 

IT Evidence-Gathering Procedures 249 

Other IT Considerations 251 

Forming Conclusions and Reporting 253 

Audit Reports 254 

Introduction to Audit Reports 254 

PCAOB on Audit Reports 261 

Audits of Group Financial Statements 263 

EmphasiS'Of'Matter Paragraphs and Other-Matter Paragraphs 267 

Qualified for Scope Limitation 270 

Qualified for Misstatement 273 

Adverse Opinion 275 

Disclaimer of Opinion 277 

Consistency of Financial Statements 280 

PCAOB on Evaluating Consistency of Financial Statements 282 

Opening Balances—Initial Audits 284 

Other Information Along with Financial Statements 288 

Supplementary Information Related to Financial Statements 290 

Required Supplementary Information 292 

PCAOB on Auditing Supplemental Information 294 

Alert to Restrict Report 297 

Financial Statements Using Another Country's Framework 299 

Reporting on Summary Financial Statements 301 

Interim Financial Information 304 

Sample Reports 309 

Unmodified Opinion (Reference to Legal Requirements) 309 

Unmodified Opinion (No Reference to Legal Requirements) 311 

Unmodified Opinion (Sentence by Sentence) 313 

Unmodified in Current Year, Balance Sheet in Prior Year 315 

Unmodified in Prior Year, Qualified In Current Year 317 

Qualified for Scope 319 

Qualified for Material Misstatement 321 

Qualified for Inadequate Disclosure 323 

Adverse Opinion 324 

Disclaimer ofOpinion for Scope 326 

Unmodified on B/S, Disclaimer on I/S and Cash Flows 327 

Emphasis-of-Matter Paragraph 329 

Other-Matter Paragraph 331 

Reference to Component Auditor 333 

Single Financial Statement 334 

Specific Element (Special Purpose Framework) 335 

incomplete Presentation 336 

Application of Accounting Principles (Second Opinion) 337 

Report on Summary Financial Statements 338 

Review Report on Interim Financial Statements 339 

vii 


Contents 


Other Reports 340 

Reports on Application of Requirements of Framework 340 

F/S with Special Purpose Frameworks 343 

Audits of Single F/S and Specific Elements, Accounts, or Items 346 

Reporting on Compliance with Requirements in an F/S Audit 349 

Service Organizations—User Auditors 353 

Service Organizations—Service Auditors 355 

Comfort Letters 358 

Government Auditing Standards 363 

Compliance Audits 367 

SSARSs—General Principles 370 

SSARSs—Preparation of Financial Statements 373 

SSARSs—Compilation Engagements 375 

SSARSs—Review Engagements 379 

SSARSs—Other Topics 383 

Sample Reports 387 

F/S Prepared on Cash Basis 387 

F/S Prepared on Regulatory Basis (for General Use) 388 

Profit Participation 390 

Sample Review Report on Financial Statements 391 

Sample Compilation Report on Financial Statements 392 

Separate Report on Compliance (No Instances of Noncompilance) 393 

Separate Report on Compliance (with Noncompliance Identified) 394 

Combined Report on Audited Financial Statements and Compliance Issues 395 

Other Professional Services 397 

AlCPA on Reporting on Internal Control in an Integrated Audit 397 

PCAOB on Reporting on Internal Control In an Integrated Audit 407 

PCAOB on Reporting Whether a Previously Reported Material Weakness Continues to Exist 413 

Auditing Employee Benefit Plans 416 

Introduction to Attestation Standards 421 

Attestation Standards—Common Concepts 424 

Examination Engagements 427 

Examination Reports 431 

Review Engagements 435 

Review Reports 438 

Agreed-Upon Procedures Engagements 442 

Prospective Financial Information 447 

Pro Forma Financial Information 454 

Compliance Attestation 459 

Management's Discussion and Analysis (MD&A) 463 

Assurance Services 467 

Sample Reports 469 

Examination of Forecast 469 

AUP of Forecast 470 

Compilation of Forecast 471 

Examination of Pro Forma 472 

Review of Pro Forma 473 

Examination for Compliance 474 

AUP for Compliance 475 

Example Management Report (with No Material Weaknesses Reported) 476 

Unmodified Opinions on Financial Statements and ICFR (Combined Report) 477 

Unmodified Opinion on ICFR (Separate Report on ICFR) 479 

Adverse Opinion on ICFR (Separate Report on ICFR) 481 

Examination of MD&A 483 

Review of MD&A 484 

Index 4S5 


viii 








About the Authors 


CPAexcel® content is authored by a team of accounting professors and CPA Exam experts from top accounting colleges 
such as the University of Texas at Austin (frequently ranked the #1 accounting school in the country), Northern Illinois 
University (frequently ranked in the top 10 in its peer group and top 20 overall), and the University of North Alabama. 

Professor Craig Bain 

CPAexcel® Author, Mentor, and Video lecturer 
Ph.D., CPA 

Professor, Franke College of Business, Northern Arizona University 

Professor Allen H. Bizzell 

CPAexcel® Author, Mentor, and Video Lecturer 
Ph.D., CPA (inactive) 

Former Associate Dean and Accounting Faculty, University ofTexas (Retired) 

Associate Professor, Department of Accounting, Texas State University (Retired) 

Professor Gregory Carnes 

CPAexcel® Author, Mentor, and Video Lecturer 
Ph.D., CPA 

Raburn Eminent Scholar of Accounting, University of North Alabama 

Former Dean, College of Business, Lipscomb University 

Former Chair, Department of Accountancy, Northern Illinois University 

Professor Meghann Cefaratti 

CPAexcel* Author and Video Lecturer 
Ph.D. 

Grant Thornton Professor of Accountancy, Department of Accountancy, Northern Illinois University 

Professor B. Douglas Clinton 

CPAexcel* Video Lecturer 
Ph,D., CPA, CMA 

Alta Via Consulting Professor of Management Accountancy, Department of Accountancy, Northern Illinois University 

Professor Charles J. Davis 

CPAexcel* Author 
Ph.D., CPA 

Professor of Accounting, Department of Accounting, College of Business Administration. California State University—Sacramento 

Professor Donald R. Deis Jr. 

CPAexcel* Author and Video Lecturer 
Ph.D., CPA, CFE 

TAMUS Regents Professor and Ennis &\^rginia Joslin Endowed Chair in Accounting, College of Business, 

Texas A&M University—Corpus Christ! 

Former Director, School of Accountancy, University of Missouri—Columbia 

Former Professor and Director, Accounting Ph.D. Program, Louisiana State University—Baton Rouge 

Professor Marianne M. Jennings 

CPAexcel® Author and Video Lecturer 
J.D. 

Professor Emeritus of Legal and Ethical Studies, W.P. Carey School of Business, Arizona State University 

Professor Robert A. Prentice 

CPAexcel® Author and Video Lecturer 
J.D. 

Ed and Molly Smith Centennial Professor In Business Law and Distinguished Teaching Professor, J.D, 

McCombs School of Business, University ofTexas 

Professor Pam Smith 

CPAexcel® Author and Video Lecturer 
Ph.D., MBA, CPA 

KPMG Professor of Accountancy, Department of Accountancy, Northern Illinois University 


CPAexcel® Author and Video Lecturer 
Ph.D., MPA, CPA (inactive) 

Gatton Endowed Chair, Von Allmen School of Accountancy, University of Kentucky 

Professor Donald E.Tidrkk 

CPAexcel® Author and Video Lecturer 
Ph.D., CPA, CMA, GA 

Deioitte Professor of Accountancy, Northern Illinois University 

Former Associate Chair, Department of Accounting, Director of Professional Program in Accounting and Director of the 
CPA Review Course, University ofTexas at Austin 


IX 


About the 



Professor Donald E.Tidrick Is the Deloitte Professor of Accountancy at 
Northern Illinois University. From 1991 to 2000, Dr.Tidrick was on the faculty 
at the University of Texas at Austin, where he was Associate Chair of the 
Department of Accounting, Director of the Professional Program in Accounting 
and Director of UT'sCPA Review Course. Among other professional distinctions, 
Dr. Tidrick serves on the Educators'Advisory Panel for the Comptroller General 
of the United States, and he Isa member of the Ethics Committee of the Illinois 
CPA Society. In 2013, he received the AlCPA's Distinguished Achievement in 
Accounting Education Award. 



Professor Robert A. Prentice Is the Ed and Molly Smith Centennial Professor 
of Business Law at the University of Texas, where he created a law and ethics 
class for accounting students. Professor Prentice has written several textbooks 
on law and ethics and many law review articles on business ethics, accountants' 
liability, and securities law. He has won more than 50 teaching awards. 


X 



Welcom 





Passing the Auditing and Attestation Part of the CPA Exam 

Candidates sometimes have a misperception about the Auditing and Attestation part of the CPA 
examination, believing that auditing is primarily a practice-oriented part of the exam. They may believe 
that having had firsthand experience doing audit work is sufficient for success on this part, or that not 
having had such experience is insurmountable. Sometimes candidates have a false sense of security, 
expressing the view that "Auditing is just common sense!" However, their view often changes when they 
see the specificity of the CPA Exam questions that focus on the relevant concepts and the applicable 
professional standards. Passing the auditing part of the CPA examination is fundamentally an academic 
endeavor. I believe that everything you need to pass is contained in Wiley CPAexcel®—all that is required is 
your commitment to carefully study it. 

AlCPA Professional Standards 

The Auditing and Attestation part of the CPA examination focuses heavily on candidates'familiarity 
with the applicable AlCPA Professional Standards. Since the AlCPA prepares the exam, it should not be 
surprising that they emphasize their professional literature. Indeed, a substantial majority of the points 
in auditing focuses on candidates'knowledge of the AlCPA's Statements on Auditing Standards, the 
Statements on Standards for Attestation Engagements, the Statements on Standards for Accounting and 
Review Services, and, to a lesser extent, the Statements on Quality Control Standards.The entire set of 
AlCPA Professional Standards tested in the Auditing and Attestation area has been addressed. Of course, 
the PCAOB auditing standards are "fair game" for testing and are also appropriately covered in Wiley 
CPAexcel®. 

Wiley CPAexcel® Materials 

These materials strive to achieve an optimal balance between technical depth, covering the topics on 
the AlCPA Exam Blueprints, and efficiency, focusing on the task at hand without excess verbiage and 
unnecessary detail. The materials emphasize the professional standards and important concepts that are 
the primary object of testing in the Auditing and Attestation area. 

I encourage you to review the study text basically in sequence, since auditing has something of a 
chronological order—including planning, evidence gathering, and reporting. Read the study text carefully, 
and very importantly, take the time to work on the knowledge checks, the multiple-choice questions, and 
task-based simulations that are integral to Wiley CPAexcel®'s successful approach. 

Multiple-Choice Questions 

Even though the number of professional standards has increased over the years, these standards often deal 
with only incremental changes to similar prior standards, in many cases, the underlying concepts have not 
changed very much. This part of the exam is not quantitative by nature, so questions cannot be updated 
by simply changing the"numbers." If you make a diligent effort studying these past exams' multiple- 
choice questions, you will very likely see some "old friends" on your examination, or, at the very least, some 
questions that are very similar to what you have practiced. 

Final Review 

In addition to diligently studying the study text and practicing proficiency questions and exam questions, 
candidates invariably benefit from an intensive final review.The study text is designed to facilitate an 
efficient review and I encourage you to spend a few days reviewing the study text from start to finish to 
refresh your memory of important concepts immediately prior to testing. 

Work hard and enjoy the accomplishment of becoming a CPA for the rest of your life! 

~ Professor Donald Tidrick 
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Welcome to Auditing and Attestation 


In AUD, 1 am responsible for the 15-25% of the CPA Exam that Is devoted to Ethics, Professional 
Responsibilities and General Principles. This material includes the AlCPA's Code of Professional Conduct and 
professional and independence requirements of the SEC, PCAOB, GAO, and DOL. 

Most of the attention in this part has always been upon the AlCPA Code of Professional Conduct. The 
Code is now easily accessed at the AlCPA website: httpy/pub.aicpa.org/codeofconduct/Ethics.aspx. It is 
easily updated and organized along functional lines. Most of the Code addresses the attest work done by 
"Members in Public Practice." Some of the Code addresses the work done by "Members in Business," such as 
management accountants, internal auditors, accountants working for government agencies and NGOs, etc. 
A small portion of the Code addresses "Other Members" such as CPAs who are unemployed or retired. 

Remember that AlCPA's tax-related ethics rules are located In the Regulation section. Many provisions of 
the Code covered here—such as those related to integrity, objectivity, advertising, and the like—apply to 
CPAs in all lines of endeavor—audit, tax, advisory services, etc. 

The SEC and PCAOB material contained in this part deals primarily, though not exclusively, with additional 
Sarbanes-Oxley provisions aimed generally at improving the quality of financial information flowing to 
investors. Some of these are discussed inside our material on the AlCPA Code of Professional Conduct 
because they override the Code's provisions where there Is a conflict. 

- Professor Robert Prentice 
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Professional Responsibill 
and General Principles 



AlCPA Code of Professional Conduc 

Introdyctlon and Preface 


1 , y<^^ould be able to: 

Understand the basic orgajpjjzaffionai structure of the new 
Professional Conduct. 


2 . Explain the six key princip^^ which the code is baj 



betslon of the Code of 


i. introduction 

A. An electronic version of the AlCPA's Code of Professional Conduct is easily accessed on the AlCPA's 
website. This electronic version is easily updated. 

B. The code divides professional responsibilities In terms of the role that members play. Part 1 
of the code sets out rules for members in public practice, such as independent auditors, tax 
professionals, and consultants who provide professional services to third parties. This includes, 
of course, independence rules but also rules regarding integrity, objectivity, and discreditable 
acts. Part 2 of the code sets out rules for members in business, such as internal auditors at a 
corporation. They need not worry about Independence rules, and many of the other rules for 
members in business are Identical (or nearly so) to the nonindependence rules that apply to 
members in public practice. Part 3 sets out rules for other members, such as those who are 
unemployed or retired, who are expected to avoid discreditable acts. 

C. The code also follows the lead of the International Federation of Accountants by putting into place 
a Conceptual Framework for answering questions that arise that are not answered even by the 
many detailed code provisions and Interpretations. In virtually every subject matter area of the 
entire code, if there is no clear answer, the Conceptual Framework should be applied. 

II. Preface (Part 0} 

A. Overview 

1. The code is divided into three main parts: 

a. Part 1 applies to members in public practice. 

b. Part 2 applies to members in business. 

c. Part 3 applies to other members. 

2. Members serving in multiple roles should choose the most restrictive applicable provisions. 

B. Principles and rules of conduct contained in the code are supplemented by: 

1. Interpretations 

2. Definitions 

3. Applications 

4. Where applicable, standards promulgated by other bodies such as 

a. State certified public accounting (CPA) societies 

b. Securities and Exchange Commission 

c. Public Company Accounting Oversight Board 

d. Government Accountability Office 
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Introduction and Preface 


e. Department of Labor 

f. Various taxing authorities 


1. By voluntarily joining the AlCPA, members assume an obligation of self-discipline above and 
beyond legal requirements. 

2. The six major principles call for"an unswerving commitment to honorable behavior, even at 
the sacrifice of personal advantage": 

a. "Responsibilities principle. In carrying out their responsibilities as professionals, members 
should exercise sensitive professional and moral judgments In all their activities." 

i. This principle imposes a continuing responsibility on members to "cooperate with 
each other to: 

1. "improve the art of accounting, 

2. "maintain the public's confidence, and 

3. "carry out the profession's special responsibilities for self-governance." 

b. "Public Interest principle. Members should accept the obligation to act in a way that 
will serve the public interest, honor the public trust, and 
demonstrate a commitment to professionalism." 

c. "Integrity principle.To maintain and broaden public 
confidence, members should perform all professional 
responsibilities with the highest sense of integrity." 

I. "Integrity is measured In terms of what is right and just"; members should always ask 
"Am I doing what a person of integrity would do?" 

d. "Objectivity and Independence principle. A member should maintain objectivity and 
be free of conflicts of interest in discharging professional responsibilities. A member in 
public practice should be independent in fact and appearance when providing auditing 
and other attestation services." 

i. "Objectivity is a state of mind" that requires: 

1. impartiality, 

2. intellectual honesty, ond 

3. freedom from conflicts of interest. 

ii. Only members In public practice must act with independence, but all members 
performing alt services must act with objectivity and integrity. 

e. "Due care principle. A member should observe the profession's technical and ethical 
standards, strive continually to improve competence and the quality of services, and 
discharge professional responsibility to the best of the member's ability." 

L Perfection is not required. 

H. Competence requires a commitment to continued learning—hence, continuing 
professional education. 

iii. Members may derive competence from research or consultation with experts. 

iv. Due care entails 

1. Adequate planning of engagements 

2. Supervision of professional activities for which members are responsible 


Note 
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Ethics, Professional Responsibilities, and General Principles 


f. "Scope and nature of services principle. A member in public practice should observe the 
Principles of the Code of Professional Conduct In determining the scope and nature of 
services to be provided." 

g. At a minimum, members should: 

I. Practice in firms that have good internal quality control procedures, 

ii. Use their individual Judgments to determine whether the scope and nature of 
services provided to an audit client would create a conflict of interest, and 

iii. Individually assess whether a contemplated activity is consistent with their role as 
professionals. 



Audit 

Compilation 

Tax 

Consulting 

Integrity 

Yes 


Ye" 

Yes 

Objectivity 



Y-^'. 

, Yes 1 

Independence in Fact 


No ^ , 

No 

No 

Independence in Appearance 




No 


D. Definitions 

1. Part 0 contains approximately 50 definitions, ranging from "Acceptable Level"to "Threats."Thls 
study guide sets out various definitions as they become relevant to the substantive provisions 
being discussed, but it couldn't hurt to read through the definitions. 



ultim'stte" responsibility 

affix thefirm's'nameto 

of theflrm without 

engagement withoutpa^^^^^^B 
to sign or affix th^ firrn's 
engagement withputpajiner approval 


g who either (a) has the 
the authority to sign or 
isue, an attest report on behalf 
e firm \o conduct an attest 
jmployee has rhc authority 


For example, tl 


ct to conduct an 


•<t <=*nqagement 
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After studying this lesson, you should be able to: 

1. Apply the Conceptual Framework answer questions of 
dearly answered in the code itself. 


liilfy th®re not 


I. introduction 

A. Part 1 of the Code of Professional Conduct applies to members in public practice (MIPPs). Public 
practice consists of the performance of professional services (e.g., audit, tax, consulting) for a 
client by a member or the member's firm. 

II. Conceptual Framework —Where the code's rules and interpretations do not provide a dear answer 
to a particular situation, members should always apply the threats-and-safeguards Conceptual 
Framework in order to determine whether threats to a member's compliance with the rules 
(independence and otherwise) can be reduced to an acceptable level (defined as "a level at which a 
reasonable and informed third party who is aware of the relevant Information would be expected 
to conclude that a member's compliance with the rules is not compromised") by application of 
safeguards. 

A. There are three main steps to applying the Conceptual Framework: 

1. identify threats. 

2. Evaluate the significance of the threats. 

3. Identify and apply safeguards. 

B. There are seven broad categories of threats: 

1. Adverse interest threats. Examples: 

a. Client sues or threatens to sue firm. 

b. Subrogee makes claim against firm to recover payments it made to client. 

2. Advocacy threats. Examples: 

a. Member provides forensic accounting services to client in lawsuit with third party. 

b. Firm acts as investment advisor, underwriter, promoter, or registered agent for a client. 

3. Familiarity threats. Examples: 

a. Member's spouse, parent, sibling, or close friend Is employed by the client. 

b. Former firm partner joins client In a key position. 

4. Management participation threats. Example: 

a. Member takes on role of client management. 

5. Self-Interest threats. Examples: 

a. Member has a financial interest in a client that may be affected by outcome of 
professional services the firm is providing. 

b. Firm relies excessively on revenue from a single client. 
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6. Self-review threats. Examples: 

a. Member relies on work product of own firm. 

b. Member does client's bookkeeping. 

c. Partner in firm was an officer or director of client. 

7. Undue influence threats. Examples: 

a. Client threatens to fire firm or to withhold future business unless firm accedes to client's 
wishes. 

b. Client's major shareholder threatens to withdraw or terminate a professional service 
unless the member reaches desired conclusion. 

C. Three kinds of safeguards exist: 

1. Safeguards created by the profession, legislation, or regulation. Examples: 

a. Ethics education and training requirements, including continuing professional education 
(CPE) 

b. Professional standards and threat of discipline 

c. External reviews of a firm's quality controls 

d. Legislation regulating firm's professionals 

e. Licensure requirements 

f. Professional resources, such as ethics hotlines 

2. Safeguards implemented by the client.The client has, for example: 

a. Knowledgeable and experienced managers 

b. Appropriate tone at the top regarding ethics and compliance 

c. Appropriate policies and procedures for compliance and fair reporting 

d. Appropriate ethics policies and procedures 

e. Appropriate governance structure, Including an active audit committee 

f. Policies to prevent client from hiring a firm to provide services that would impair 
independence or objectivity 

3. Safeguards implemented by the firm. Examples: 

a. Strong leadership emphasizing compliance and acting in the public interest 

b. Policies and procedures to implement and monitor engagement quality control 

c. Designation of qualified senior manager to oversee firm's quality control system 

d. An effective internal disciplinary system 

e. Rotation of engagement team senior personnel 

f. Policies precluding partners from being compensated for selling nonattest services to 
attest client 



Conflicts of Interest, Directorships, and Gifts 


After studying this lesson, you should be able to: 

1. ii'-iMst .lid .-nn Iv .Ay* x nijij.y Ou* Code of Piolussiona! Conduct's rules regarding . • r i' 

conflicts of interest, (b) Members serving on corporate boards.' (c) Gifts and enter^lnment (whicf 
can pose a threat to member integrity and objectivity). 


I. Conflicts of Interest 

A. In evaluating possible conflicts of Interest, members should ask: Would a reasonable and 
informed third party conclude that a conflict exists? 

B. There are two main types of conflicts: 

1. Between interests of two clients 

2. Between interests of client on one hand and firm and/or its members on the other. 


Examples 




^ 1, Simultaneously advising two clients trying to acquire the same company 


Preparing valuation of assets to two clients who are simultaneously the potential sellenand the 
potential buyer of the same assets I r: : 

3., Representing both a husband and a wife In a divorce proceeding 

4., .;Adyising a client to invest in a business owned by a member or member's relatives 
5. Advising a,client on 


6 , - Providing forensic accounting services to one client to assist It in deciding whether to sue anoth< • 

client . > 

7, Providing persprial financial planning services to several members of a family or group known to ; , 

have conflicting imefests . ; _ ^ 

to a service provider that, in turn, refers clients to member under an exclusive 


8. V- Referring a cllentto 
: arrangement 


C. Identification—Before accepting an engagement, members should identify potential conflicts 
that threaten independence and objectivity, and should continue to monitor as engagement 
progresses. 

1. When network firms are Involved, members are not required to take specific steps to identify 
conflicts of interest of other network firms but should apply the conceptual framework if they 
know or have reason to know that a conflict exists or might arise. 
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D. Evaluation—When an actual conflict is Identified by any member, the Conceptual Framework 
should be applied and engagements should be refused or terminated if risk of violation is 
unacceptably high. Safeguards that might reduce threats to an acceptable level include: 

1. Implementing mechanisms to prevent unauthorized disclosure of confidential information 
when providing services to multiple clients with conflicting interests, including use of: 

a. Separate engagement teams 

b. Policies and procedures to limit access to client files, confidentiality agreements and 
physical and electronic separation of confidential information 

2. Regular review by a senior manager not involved In the engagement 

3. Consulting with third parties, such as a professional body or legal counsel 

E. Disclosure—Conflicts should be disclosed to clients and affected third parties, even if threats to 
compliance are at an acceptable level. 

1. General disclosure (e.g., “We audit several firms in your industry sector") may suffice. 

2. Specific disclosure (e.g.,"Weadvlseyour closest competitor who would love to have access to 
your confidential information that we possess") may be needed, however. 

F. Documenting the threat-reducing process is wise. 

G. Members should always comply with federal (Including Internal Revenue Service Circular 230), 
state, or local provisions that are more restrictive than the code. 

II. Director Positions 

A. Objectivity is threatened when a member serves as a client entity's director. 

B. It Is preferable to serve as a mere consultant to a client's board. 

C. The Conceptual Framework should be applied to determine whether the threat to objectivity is 
unacceptably high. 

III. Gifts and Entertainment 

A. Objectivity and integrity are threatened If the client (including its officers, directors, and 10% 
shareholders) give gifts or entertainment to the firm or its members (or vice versa). 

B. A violation is presumed if: 

1. The member receives gifts or entertainment from a client that violate the member's or client's 
policies or applicable laws and regulations and 

2. The member knows or is reckless In not knowing of the violation. 

C. If no rules are violated, then there Is no problem if the gifts or entertainment are "reasonable in the 
circumstances." 

D. Factors in determining reasonableness include: 

1. The nature of the gift or entertainment 

2. The occasion giving rise to the gift 

3. The cost or value of the gift or entertainment 

4. The nature, frequency, and value of other gifts 

5. Whether the entertainment was associated with active conduct of the business 
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After studying this lesssUr you should be able to: 

1 . Understands »be a|>le to apply the ne^^ electronic Cbde of Professional Conduci "rovisions 
regardinghov loieportlncomewithoiiiviolatingthecodc ' 

2 . Understandhg.vtoapplytheruiesandorocessgoverhinghowtpavqrdasubordi • ionof 

judgment. ? ov,; 


i. Preparing and Reporting Income 

A. Obviously there \A/ould be a violation of the Code if a member has: 

1. Made, permitted, or directed another to make materially false and misleading entries in an 
entity's financial statements or records, 

2. Failed to correct misstatements when having the authority to do so, or 

3. Signed, permitted, or directed another to sign misleading documents. 

II. Subordination of Judgment 

A. Assume that members have a disagreement with a superior over how to record potential earnings 
(or some other issue). The members are not supposed to simply do what the superior wants and 
subordinate their judgment. 

B. The proper procedure is to: 

1 . Evaluate whether the threat Is at an unacceptable level, which occurs if the position taken 
would result in a material misrepresentation or legal violation. If the threat is not significant, 
then nothing further need be done. 

2. But if there is such a significant threat, the member should discuss the matter with the 
supervisor. 

3. If discussion with the supervisor does not resolve the difference of opinion, the member 
should go over the supervisor's head. 

4. If, after discussion with people up the chain, the member Is still worried that the right thing 
is not going to be done, the member should. In no particular order, invoke the following 
safeguards: 

a. Determine whether the organization's policies and procedures have any additional 
requirements for reporting differences of opinion. 

b. Determine whether there is a duty to report to externa! authorities. 

c. Consult legal counsel. 

d. Fully document the situation. 

5. If the member ultimately concludes that the threat of misrepresentation or legal violation 
cannot be reduced to an acceptable level, he or she should consider quitting the firm and 
taking appropriate steps to eliminate his or her exposure to subordination of judgment. 

6. Although the code does not require the member to quit, only to consider it, it goes on to say 
that "nothing in this interpretation precludes a member from resigning from the organization 
at any time." 

7. Resigning from the firm would not necessarily discharge all obligations, such as to report to 
regulatory authorities or an external auditor. 
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Adwocacy, Third-Party Service Provi 
General Standards^ and Accounting 




After studying this lesson, you Aould be able to: 

1. Explain and apply the Code^rf^rofessional Conducts rules regardij^Jidvocacy on behalf of clients 
and the outsourcing of work#^ third-party service providers. •; v 

2. Master the general standards^that apply to members. ® 

3. Understand members'responsibilities regarding basic accountBgS|j^^® 4 ^'a, 


I. Client Advocacy 

A. Members doing attest work may not advocate for their attest clients. 

B. Members providing nonattest services may advocate for their clients, but should be careful and 
conservative so as to preserve credibility and avoid the "zealous" advocacy that lawyers often 
provide. 

li. Use of a Third-Party Service Provider (TSP) 

A. Outsourcing work to third-party service providers can threaten objectivity or integrity. 

B. There is no problem if the third-party service provider provides only administrative support (e.g., 
record storage, software application hosting, authorized e-file transmittal services). 

C. If substantive services are outsourced, clients should be notified, preferably in writing, before any 
confidential information Is provided to the third-party service provider. 

D. If the client objects, the member should: 

1. Not outsource, or 

2. Decline the engagement 

III. General Standards 

A. Members must follow rules set by appropriate bodies, meaning in part: 

1 . Take on jobs only if you can reasonably expect to complete them with professional 
competence. 

2. You need not be perfect but should always exercise due professional care when providing 
all professional services 

3. Always adequately plan and supervise your provision of professional services. 

4. Never render conclusions or recommendations without sufficient relevant data to support 
them. 

8. Competence means that the member or his/or her staff has appropriate technical qualifications 
and the member can supervise and evaluatequality of work performed. 

1. Decline an engagement unless you have necessary knowledge or can acquire it through 
research or consultation with others. 

2. If you employ a specialist to provide consulting services, you should have the ability to define 
the tasks and evaluate the results. 

C. Using Third-Party Service Providers 

1. Ensure any third-party service providers you use have the required professional qualifications, 
technical skills, and needed resources. 

2. Adequately plan and supervise the third-party service providers' services and obtain the data 
needed to evaluate the job. 
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Advocacy, Third-Party Service Providers (TSPs), General Standards, and Accounting Principles 


iV, Accounting Principles 

A. Follow generally accepted accounting principles (GAAP) and other relevant accounting principles. 

B. Exceptions—Departure from GAAP is appropriate if the member: 

1. Demonstrates that due to unusual circumstances, following GAAP would mislead 

2. Describes: 

a. The departure, 

b. Its approximate effects, and 

c. The reasons why compliance with GAAP would mislead. 

C. Circumstances justifying departure Include: 

1, New legislation 

2. Evolutionofanewformofbusiness 

D. Circumstances not justifying departure Include: 

1. An unusual degree of materiality 

2. Conflicting industry practice 

E. Departure from GAAP is permitted when other accounting principles apply, such as: 

1. Financial reporting frameworks generally accepted In foreign country 

2. Frameworks prescribed by contract 

3. Other special-purpose frameworks required by a law or by a domestic or foreign regulatory 
agency 
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Discreditable 


This lesson mostly survt^S^fidiscredliable acts, some of which arecovepdd^rfMore detail elsewhere 
(such as the confid|^ 5 J^yigty) But ifedives into detail regarding the faidjg^^^licated rules regarding 
a member's ob!iga|^ to-^i^uce accounting records pursuant to a cllenf^' 

After studying thi| Itswili you should be able to: 

1. Understand th^ft^eJ^Sive) iist^f acts that the Code of Professioi^ 
discreditable a|ts by membci In public practice. 





ct deemsto be 


I. Acts Discreditable —Members shall not commit discreditable acts, including: 

A. Discrimination and harassment in employment practices 

B. Solicitation or disclosure of CPA Exam questions and answers 

C. Failure to file a tax return (Including one's own personal return or his or her firm's) or failure to pay 
a tax liability 

D. Negligence in the preparation of financial statements or records 

E. Material departure from the audit standards of government bodies, commissions, or other 
regulatory agencies 

F. Failure to follow additional government standards over and above generally accepted accounting 
standards where applicable 

G. Improper use of indemnification and limitation of liability provisions in violation of regulatory 
requirements 

H. Confidential information obtained from employment or volunteer activities (more detail in the 
"Advertising and Confidentiality" lesson) 

I. False, misleading, or deceptive acts in promoting or marketing professional services 

J. Use of the CPA credential in violation of rules and regulations 

K. Records requests (more detail below) 

L. Removing client files or proprietary information from a firm after termination 

M. Use of confidential information obtained from a prospective client or nonclient without consent 

N. Records Requests 

1. Four categories of records 

a. Client-provided records are records given by the client to the member. 

b. Member-prepared records are those the member was not specifically engaged to 
prepare and are not in the client's books and records, rendering the client's financial 
information incomplete. Example: adjusting, closing, combining, or consolidating 
journal entries and supporting schedules and documents that the member proposed or 
prepared as part of an engagement. 

c. Member's work products are deliverables set forth in the engagement letter, such as a 
tax return. 

d. Working papers are all other items prepared solely for purposes of the engagement, 
including items prepared by both the member (e.g., audit programs, analytical review 
schedules, and statistical sampling and analysis) and the client (e.g., papers prepared at 
the member's request and reflecting testing or other work done by the member). 
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Discreditable Acts 



a. Client-provided records should be delivered to the client at the client's request, even if 
the client has not paid Its bill to the member. 

b. Member-prepared records related to a completed and issued work product should be 
delivered to the client at the client's request, except that they may be withheld if fees are 
due for that specific work product. 

c. Work products should be delivered to the client at the client's request, except that they 
may be withheld under four circumstances: 

i. Fees are due for the specific work product 

ii. The work product is Incomplete. 

ill. To comply with professional standards (e.g., withholding an audit report because of 
unresolved audit issues). 

iv. If threatened or outstanding litigation exists concerning the engagement or the 
member's work. 

d. Working papers are the member's property and need not be provided to the client 
(unless some regulation or contractual provision requires production). 

3. Members may charge a reasonable fee for the time and expense incurred in producing 
records. 

4. Members need not convert records that are not in electronic format to electronic format. 

5. Sometimes state laws are more demanding of accountants, and those laws must be followed. 

6. Generally, client requests should be honored within 45 days. 
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After studying this you should be able to: 

Understand howfembers in public practice are supposed taj 
avoiding them), w 

Understand howKfebers inKbiic practice are supposed 


(mostly by avoiding them). 



die contingent fees (mostly by 


die commissions and referral fees 


1. Contingent Fees 

A. Members shall not receive contingent fees for any service performed for a client for whom he or 
she performs any of the following attest services: 

1. A financial statement audit or review, 

2 . A financial statement compilation reasonably expected to be used by a third party that does 
not disclose a lack of independence, or 

3. An examination of prospective financial information. 

B. Nor may a member prepare an original or amended tax return or claim for a tax refund for a 
contingent fee for any client, even nonattest clients. 

C. The definition of a contingent fee ["a fee established for the performance of any service pursuant 
to an arrangement in which no fee will be charged unless a specified finding or result is attained, 
or in which the amount of the fee is otherwise dependent upon the finding or result of such 
service"] excludes fees "fixed by courts or other public authorities, or, in tax matters, if determined 
based on the results of judicial proceedings or the finding of government agencies." 

D. A member may do tax work for nonattest clients in exchange for contingent fees if Internal 
Revenue Service rules are not to the contrary (which they sometimes are). 

E. Examples of some permitted contingent fees in the tax area include: 

1. Representing a client before a revenue agent examining the client's Income tax return 

2. Filing an amended federal or state income tax return claiming a refund based on a tax issue 
that is the subject of a test case involving a different taxpayer 

3. Filing an amended federal or state income tax return (or refund claim) claiming a tax refund in 
an amount that will be examined by a tax authority, such as the Joint Committee on Taxation 

4. Helping a client obtain a private letter ruling or influencing the drafting of a regulation or 
statute 

F. Contingent fees are not permitted If a member prepared an amended return claiming a refund 
because of an error in the original return. 

G. The code contains additional rules regarding services performed by a member's spouse for a 
contingent fee and contingent fees In connection with Investment advisory services that are not 
covered here. 

H. Commissions and Referral Fees 

A. Referral fees and commissions are prohibited for attest clients. 

B. For nonattest clients, they are permitted, but must be disclosed. 
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Fees 


C. A member's spouse may receive a commission from the member's attest client, so long as the 
spouse's activities are separate from the member's practice and the member is not significantly 
involved in the spouse's activities. 

D. Members taking title to a product and assuming risks of ownership may resell the product to a 
client at a profit without disclosure. 

E. Similarly, members may subcontract services to third parties and mark up the cost of the services 
to the client without this being considered a commission. 
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Advertising 



ildbeabieto: 

raightforward code restrict tons on advertising. 

jorecomplicated rules otit'ieconfidentialityoblig :lon that 
b clients. 


1. Explain and apj: 

2. Explain and apf 
members in pu 


I. Advertising 

A. Members are responsible not only for their own promotional efforts, but also for those of third 
parties if they are asked to perform professional services for the client or customer of a third party. 

B. Promotional efforts are a discreditable act if they are false, misleading, or deceptive (i.e., if they 
contain any claim that would likely cause a reasonable person to be misled), which would be the 
case if they: 

1. Create false or unjustified expectations of favorable results 

2. Imply the ability to influence any court, tribunal, regulatory agency or similar body 

3. Contain a representation that the member will perform services for stated fees when it is likely 
at the time that the fees wil! be substantially increased 

il. Confidential Information 

A, General Rule— A member in public practice shall not disclose confidential client information 
(defined as "any proprietary information pertaining to the employer or any organization for whom 
the member may work in a volunteer capacity that is not known to be available to the public and 
is obtained as a result of such relationships") without the specific consent of the client. 

1. It is a discreditable act to inappropriately disclose confidential client information. 

2. Members should take reasonable steps to ensure that staff members do not improperly 
disclose confidential information. 

3. The confidentiality duty survives the employment relationship. 

B. Exceptions —Disclosures allowed where: 

1. The client consents. 

2. Disclosure is permitted by law and authorized by the employer. 

3. Disclosure is required by law. for example, to: 

a. Comply with a validly issued and enforceable subpoena or summons 

b. Inform appropriate public authorities of violations of the law 

4. Members may have responsibility or right to disclose the information, when not prohibited by 
law, to: 

a. Initiate an ethics complaint with the American Institute of Certified Public Accountants 
(AiCPA), a state board of accountancy, and so on 

b. Comply with professional standards and other ethics requirements 

c. Report potential concerns regarding questionable accounting, auditing, or other matters 
to the employer's confidential complaint hotline or those charged with governance 
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5. Disclosure Is permitted on behalf of the employerto: 

a. Obtain financing from lenders 

b. Communicate with vendors, clients, and customers 

c. Communicate with the external accountant, attorneys, regulators, and others 

6. Members should be sensitive to disclosing a client's confidential information when providing 
services to its competitors. 

7. if taking on a new client would likely lead to disclosure of confidential information from an 
existing, identifiable client, the member should not take on new client without informed 
consent from the existing client. 

8. When a member withdraws from an engagementdue to, say, irregularities in a client's tax 
return, the member should, if contacted by a potential successor firm, suggest that the 
potential successor firm contact the client to ask permission to discuss all matters freely with 
the successor. 

9. If a member prepares a tax return fora married couple, both are clients, so if during a divorce 
one spouse directs the member to withhold joint tax Information from the other, the member 
may provide information to both spouses. When receiving conflicting directions from the 
spouses, the member should seek an attorney's advice. 

10. When outsourcing work to a third-party service provider (TSP), a member should do one of 
the following before disclosing confidential information: 

1. Bind the third-party service provider contractually to maintain confidentiality and ensure 
that the third-party service provider has effective procedures in place. 

2. Obtain specific consent from the client. 

11. Members involved in a peer review must keep information they receive confidential and not 
use it for their advantage. 

12. If a third party, such as a trade association or member of academia, asks a member to disclose 
confidential information for purposes of publication or the like, the member should obtain 
the client's specific consent, preferably in writing, before disclosing. 

13. Members who are directors of organizations must be cautious, because their fiduciary duty 
to the organization might conflict with their duty to clients who might, for example, be 
customers of the organization. The threats-and-safeguards conceptual framework should be 
utilized. 

14. Disclosing clients'names is permissible, unless to do so discloses confidential information. 



Example 

y Where the member does primari 
signals tluir clients are in financh 


iptcy work and disclosing cilents' identities 




Form 


After studying ti lesson, you should be able to: 

1. Explain and apply^lB^q 9 tiS$ rules regarding what form members in public praetiee 

may practice v -;:.-’ • 

2. Explain what ames they may use for denominating their firms, 


I. Form of Organization 

A. Basic Rules 

1. Members in public practice may practice only in a form of organization permitted by law. 

2. Members in public practice may not practice under misleading firm name. 

3. Names of past owners may be Included In the name of a successor firm. 

4. A firm may not designate Itself as "Members of the AlCPA" unless all its CPA owners are 
members of the AlCPA. 

B. Ownership of a Separate Business 

1. A member may own an Interest in a separate business that performs accounting, tax, or 
consulting services, but If the member controls the separate business, then its owners and 
professional employees must comply with the code for issues such as commissions and 
referral fees. And regarding an attest client, Independence rules would have to be complied 
with as well. 

2, But if the member's interest is not a controlling one, then the code's provisions apply to him 
but not to the separate firm or its employees. 

C. Partner Designation 

1. Only members of a firm who are legally partners should use the designation "partner." 

D. Responsibility for Nonmember Practitioners 

1. If a member becomes an employee of a firm made up of one or more non members, he or 
she still must comply with the code. And if the member Is a partner in the firm, he or she is 
responsible for the firm's professional employees. 

E. Attest Engagement Performed with a Former Partner 

1. Two former partners may continue to jointly perform an attest engagement, but to make it 
clear that a partnership no longer exists, they should present their report on plain paper (with 
no letterhead). 

F. Alternative Practice Structures 

1. If a firm does attest work, 

a. CPAs must own a majority of its financial interests. 

b. CPAs must remain responsible, financially and otherwise, for a firm's attest work. 

2. CPAs are responsible for compliance with laws and regulations, for enrollment in an AICPA- 
approved practice monitoring program, for compliance with independence rules, and for 
compliance with all other applicable standards within their firms. 

II. Firm Name 

A. If two firms merge, they may use in the newly formed firm's name the name of retired or other 

partners in either or both of the former firms. 


I 
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Form of Organization and Names 


B. A CPA member who is in partnership with non-CPAs may sign reports in the firm's name and also 
affix the designation "CPA"to his or her own signature If it is clear that the firm is not holding itself 
out as entirely comprised of CPAs. 

C. No misleading name that causes confusion about the legal form of the firm or its owners' identities 
should be used. 

D. Firms within a network may share a common brand or common initials as part of their firm name 
without misleading. To be part of a network, the firms should share one or more of the following 
with other network firms: 

1. Common control among the firms 

2. Profits or costs 

3. Common business strategy 

4. Significant portions of professional resources 

5. Common quality control policies and procedures 
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MIPPs Independence Rules 




n, you should be able to: 

re regarding the independence obligations ^|nembers in public practice and 



i. Introduction 

A. Members in public practice (MlPPs) shall be independent when performing attest services. 

B. If the code and its interpretations do not resolve independence issues, the Conceptual 
Framework should be applied. 

C. Threats and Safeguards 

1. The threats to independence detailed in the code are very much the same as the threats 

to integrity and objectivity discussed elsewhere in these materials: adverse interest threats, 
advocacy threats, familiarity threats, management participation threats, self-interest threats, 
self-review threats, and undue Influence threats. 

2. The safeguards that may be applied to reduce the threats to independence come from the 
same three sources as those relevant to Integrity and objectivity: 

a. The profession, legislation, or regulation 

b. The attest client 

c. The firm 

D. The threats to independence (adverse Interest, advocacy, etc.) are concentrated in four areas: 

1. Financial relationships —Example: An attest partner should not own stock in an audit client 

2. Employment relationships —Example: Attest partners should not be on an audit client's 
board of directors 

3. Family relationships— Example: An attest partner should not audit a client whose chief 
executive officer is the partner's spouse 

4. Consulting relationships —Example: An attest firm should not provide internal audit services 
to an attest client 

E. Time Period—Independence rules must be followed when relationships exist during: 

1. The period covered by the financial statements 

2. The period of the professional engagement 

F. Covered members must comply with the Independence rules for financial interests (and many 
others): 

1. An individual on the attest engagement team {team member) 

2. An individual in a position to influence the attest engagement (PTi) 
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introduction to MiPPs Independence Rules 


3. A partner, partner equivalent {defined as "a person who is not a partner of the firm but either 
has the ultimate responsibility for the conduct of an attest engagement, or has the authority 
to bind the firm to conduct an attest engagement without partner approval"), or manager 
who provides more than 10 hours of nonattest services to the attest client within any fiscal 
year (10-hour person) 

4. A partner or partner equivalent in the office In which the lead attest engagement partner or 
partner equivalent practices in connection with the attest engagement {other partner in office) 

5. The firm, including the firm's employee benefit plans 

6. An entity whose operating, financial, or accounting policies can be controlled by any of the 
individuals or entities described in Items (1) through (5) or two or more such individuals or 
entities if they act together 
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After studying this lesson, you should be able to: 

1. Understand and be able to apply the independence rules regarding network firms that band 
together to increase their cc|n®itiveness vis-a-vis the Big Four and other competitors. 

2. Understandtheruiesregarcpi^^liatesofdients. Obviously, if auditors cannot own a direct 
and material financial inter^t attest client, they also probably should not own a direct and 
material financial interest ir^ that controls the client or a firm controlled by the client 

Understand the rules^^^^^^^gers and acquisitions of firrps. If Firm A merges with Firm B, they 
may bring to the sets of audit clients. Ai^itors at Firm A now have to worry 


/about being indepenf 



clients and vice versa. 


1. Network Firms 

A. Network firms are firms that cooperate to enhance their capabilities to provide professional 
services and share one or more of the following: 

1. A common brand name 

2. Common control 

3. Profits or costs 

4. A common business strategy 

5. Professional resources 

6. Common quality control policies and procedures 

B. Network firms must comply with the independence rules with respect to financial statement audit 
and review clients of other network firms /f the use of the audit or review report for the client is 
not restricted. 

C. For all other attest clients, members should apply the Conceptual Framework to determine 
whether independence threats are at an unacceptable level. 

li. Alternative Practice Structures 

A. The Code contains extremely complicated independence rules for firms operating in an APS 
environment that are not covered In these materials. 

111. Use of a Nonindependent Firm 

A. If partners or professional employees of another, nonindependent firm participate on the attest 
engagement team, independence of the team would be Impaired. 

B. Such members of another firm may work in a manner similar to internal auditors, however, 
without creating an Independence problem so long as the firm complies with AU-C section 610 
(which sets out the rules for the proper relationship between internal and external auditors). 


A. independence problems can obviously arise if covered members, while not having a financial, 
consulting, employment, etc. relationship with the attest client, have such a relationship with an 
"affiliate" of the client. 

B. The Code sets out numerous examples of such "affiliates," Including; 

1. An entity that a client can control 

2. An entity in which a client has a direct and material financial interest 
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3. An entity that controls a client when the client Is material to such entity 

4. An entity with a direct and material financial Interest In the client when that entity has 
significant influence over the client 

5. A sister entity of a client If the client and sister entity are each material to the entity that 
controls both 

6. A trustee that is deemed to control a trust financial statement attest client that is not an 
investment company 

7. The sponsor of a single employer employee benefit plan financial statement attest client 

C. Although there are significant exceptions (which we do not cover here), in general covered 

members must abide by independence rules for both their attest clients and their clients'affiliates. 
There are similar rules (and exceptions) when a firm audits some units, but not all, of related 
governmental agencies. 

V. Mergers and Acquisitions 

A. Independence issues can obviously arise if a member's firm acquires, is acquired by, or merges 
with another firm. The AlCPA has recently issued detailed rules to cover such situations, focusing 
on (a) employment with an attest client and (b) provision of NAS. 

B. Without covering those rules comprehensively, consider a situation where Maria, a partner of the 
ABC audit firm also works for DBF Co., which is an audit client of GHI audit firm. GHI proposes to 
purchase ABC. If the acquisition occurs, Maria may suddenly be an employee of her new firm's 
audit client. Independence should not be impaired so long as: 

1. Maria terminates her relationship with DEF before the closing date of the acquisition; 

2. Maria is not a team member or a PTI on the DEF audit ifthe engagement covers any period in 
which she worked for DEF; 

3. Maria dissociates from DEF, including ceasing participation in its employee benefit plans if she 
is a covered member; 

4. A responsible person within the new firm assesses Maria's prior relationship with DEF to 
ensure that any threats to independence are at a reasonable level. If Marla has any interaction 
with the attest engagement team or ifthe team evaluates any work done by Maria while she 
worked for DEF, an appropriate person within the firm should review the engagement prior to 
issuing the report to ensure that the team maintained integrity, objectivity, and professional 
skepticism; and 

5. All safeguards should be discussed with OEF's management and the discussions should be 
documented. 

C. Turning to NAS, the Code envisions two possibilities: 

1. What if the ABC firm provides, say, internal audit services to LMN Corporation, which is 
audited by DEF firm? If ABC acquires DEF, ABC's independence is impaired with respect to 
LMN. 

2. What ifthe ABC firm audits LMN Corporation and acquires DEF, which provides internal audit 
services to LMN Corporation? In this case, ABC's independence would be impaired unless all 
of the following conditions are met: 

a. DEF must terminate the prohibited NAS prior to the closing of the acquisition; 

b. Any individual who participated in the engagement to provide the NAS must not be on 
the LMN attest team or be a PTI; and 

c. An evaluation of the threats to independence must be conducted and it must be 
determined that by application of safeguards they have been reduced to an acceptable 
level. The evaluation must attribute the NAS to ABC in making the evaluation. 
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1. Explain and ap 
report that waf 
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After studying thb lessoni you should be able to: 

hen no longer their names'on? 

were independent. 

2. Explain and apply rui^ regarding what an engagemeht^^^^^J Jh^Without impairlhi' 

independence ^ 

3. Explain and apply rules regarding ^en an engagenieh^ fhandates alterhatlvfe 

\dispute resolution I 


4. Expi^^d apiply rules regarding under what circumsta 



^er IhBependence. 


I. Reissued Reports 

A. Covered members or their firms that were independent when they first issued an audit report 
may reissue that report or consent to its incorporation by reference, even if they are no longer 
independent, so long as they do not perform new procedures that would require updating the 
date (or dual dating) of the original report. 

B. In this connection, it is acceptable If necessary to assess the effect of recent facts on the original 
report to: 

1. Make inquiries of successor auditors 

2. Read subsequent financial statements 

3. Undertake similar procedures 

II. Engagement Contractual Terms 

A. Although the Securities and Exchange Commission (SEC) and other regulators disapprove of 
engagement contracts that indemnify auditors for the effects of their own mistakes, it is okay for 
an engagement letter to require an attest client to Indemnify or hold harmless a member firm for 
liability and costs resulting from knowing misrepresentations by the client's management. 

B. It would impair Independence for a covered member to agree to indemnify an attest client for 
losses resulting from the client's own acts. 

Hi. Alternative Dispute Resolution 

A. Engagement letters may require use of alternative dispute resolution (ADR) to resolve 
disagreements with clients. 

B. However, if alternative dispute resolution is Initiated, binding arbitration is sufficiently similar to 
litigation that it could place the member in public practice and the client in positions of material 
adverse interests and thereby impair independence, so the Conceptual Framework should be 
applied. 


A. A member in public practice (MIPP) may not sign a current-year audit report if it has unpaid fees 
from the client for services provided more than one year prior. 

B. Fees are unpaid even if: 

1. They are unbilled. 

2. The client has issued to the firm a note receivable. 

C If the client is in bankruptcy, this rule does not apply. 
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Financial Interests 

0¥er¥lewand Unsolicited Financial Interests 


I, you should be able to: 

1. Recognize the terms that r,re impodant in understanding the financial interests that can cause 
independence problems lot an atb * t firm. 

2. Know that members in public practice may not own direct or material indirect interests in an attest 
client 

3. Explain and|pply the rules that govern a situation where a financial interest unexpectedly comes 

, the way of ^member in public practic e. 


i. Overview —If a covered member has or is committed to acquire any direct (whether material or not) 

or any material indirect financial Interest in an attest client, independence is impaired. Only if interests 
are both indirect and immaterial is independence not impaired. 

n. Definitions 

A. Financial interest— Includes ownership (or an obligation to obtain ownership) in equity, debt, or 
derivatives issued by an entity. 

B. Direct financial interest —An Interest: 

1. Owned directly (even if managed by others) 

2. Under one's control (even If managed by others) 

3. Beneficially owned through an Investment vehicle, estate, trust, or other intermediary when 
the beneficiary either; 

a. Controls the intermediary, or 

b. Has the authority to supervise or participate in the intermediary's investment decisions. 

C. Indirect financial interest— An interest beneficially owned through an investment vehicle, estate, 
trust, or other intermediary when the beneficiary neither: 

1. Controls the intermediary, nor 

2. Has the authority to supervise or participate in its Investment decisions. 

D. Beneficial ownership —Occurs when an individual or entity is not the record owner but has a 
right to some or all of the underlying benefits of ownership, such as to: 

1. Direct the voting 

2. Dispose of the interest 

3. Receive its economic benefits 

III. Financial interests —These rules about financial interests normally apply only to covered members; 
however, even if a partner or professional employee of a firm is not a covered member, that person 
(and his or her immediate family, or any group of such persons acting together) cannot own more than 
5% of a client's ownership interests without impairing independence. 
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Unsolicited Financial Interests 

A. If covered members receive or learn they will receive an unsolicited financial interest in an attest 
client (perhaps through gift or inheritance) that is either a direct interest or a material indirect 
interest, independence will not be impaired if they: 

1. Dispose of the interest as soon as practicable but not later than 30 days after having both 
knowledge of the interest and gaining the right to dispose of it; and 

Do not participate on the attest engagement team after learning of the interest and before 
disposing of it. 




Mutual Funds 


After Studying this IftMon, you should be nble to: 

1. . id mdc [.(-nd' nf i'problems arising from personal investfflfew rmutUal 
funds reti^bmenf plans. 
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i. Mutual Funds 

A. A covered member who owns shares In a mutual fund has a direct financial interest in the fund 
itself. 

B. !f the member owns 5% or less of the outstanding shares of a diversified mutual fund, the interest 
in the underlying investments of the fund Is indirect. Immaterial and indirect interests do not 
impair independence. 

C. However, if the covered member owns more than 5% of a diversified fund's shares or owns a 
financial interest in an undiversified fund, then the member must evaluate the fund's underlying 
investments to determine whether he or she holds a material indirect financial interest in any of 
the underlying investments. 

D. The code gives this illustration: 




a npndivefsjfied mutual fund owns shares In attest client Company A," 
theimutualfund's 


the covered member owns 1% of the outstanding shares of the mutual fund, having a value of 
$iQdidpo;and : : V ^ 


the mutual fund has 10% of its assets invested in Company A> w 

thenth'einditectfinancia) interest of the covered member in Company A Is $10,000 

:(10®/6 X $100,00d),ah,d this amount should be measured agalhst.the covered meniber's net \worth; 

fincludingthe net worth df:h^^^ or her immediatefamily) to determine if it Is materlaj": 


H. Retirement, Savings, Compensation, or Similar Plans 

A. If covered members or their immediate family members (IFMs) seif-direct their investments into 
such a plan or have the ability to supervise or participate in the plan's investment decisions, then 
the financial interests held by the plan are direct financial Interests that impair independence even 
if they are immaterial. 

B. Two examples: 

1. A covered member Is trustee of a retirement plan and supervises its investments, which 
include shares of an attest client. 

2. A covered member participates In a retirement plan and has discretion to direct its 
investments, which include shares of an attest client. 

C. If covered members (or their immediate family members) do not self-direct or supervise or 
participate in a plan's investment decisions, the underlying investments are indirect and therefore 
do not create independence issues unless they are material. 
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D. When a defined benefit plan Is Involved, interests held by the plan are not interests held by the 
covered members unless the covered members (or their immediate family members) are trustees 
of the plan or otherwise have the ability to supervise or participate in the plan's investment 
decisions. 

E. Allocated shares held in an employee stock option plan are beneficially owned by the covered 
members but are indirect interests until the members have the right to dispose of them. At that 
point, they become direct financial interests. 
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Partnerships, 529s, Trust and Estates, 
Employee Benefit Plans 
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I. Partnerships and Limited Liability Corporations (LLCs) 

A. General Partnership —A general partner (GP) has authority to influence investments, so a general 
partner's financial interests In both the partnership Itself and its underlying investments are direct. 

B. Limited Partnership 

1. A general partner has authority to influence Investments, so a general partner's financial 
interests in both the limited partnership Itself and Its underlying investments are direct. 

2. A limited partner's interest in the limited partnership Is direct, but usually he or she will 
not have influence over Its investments so this partner's financial interest in its underlying 
investments will be indirect. 

a. If the limited partner has authority to supervise or participate in investment decisions 
or the ability to replace the general partner(s), then his or her interest in the underlying 
investments will be direct. 

C. Limited Liability Companies (LLCs) 

1. If a limited liability company is member-managed, then it is sufficiently like a general 
partnership that members' interests In both the firm and its underlying investments are direct. 

2. If a limited liability company Is agent-managed, then members are more like limited partners and 
their interests in the underlying investments are viewed as indirect unless the members have the 
authority to control the limited liability company or to supervise or participate in its investments. 

II. Section 529 Plans 

A. Prepaid Tuition Plans —Owners of a 529 account used to prepay tuition have a direct interest 
in the plan but only an indirect interest In its underlying investments. Owners of such plans are 
essentially buying tuition credits.TTie state has an obligation to provide the education regardless 
of the investments'performance. 

B. Savings Plans —Owners of these accounts have a direct financial interest in both the plan and 
its investments because they may decide in which sponsor's 529 savings plan to invest and can 
determine before investing which firms the plan will invest in. 


A. The fact that a covered member is asked to serve as trustee of a trust or executor of an estate does 
not by itself create an independence problem If an attest client's shares are owned by the trust or 
estate. However, there is a problem If: 

1. The covered member has the ability to make Investment decisions for the trust or estate. 

2. The trust or estate owns or is committed to acquiring more than 10% of the attest client's 
ownership interests, or 

3. The valueof the trust's or estate's ownership interest in the client exceeds 10 %of its total assets. 
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B. Grantor—If a covered member acts as a grantor to set up a trust, its investments are direct 
financial interests if any of the following are true: 

1. The covered member has the ability to amend or revoke the trust. 

2. The covered member has authority to control the trust. 

3. The covered member has the ability to supervise or participate in the trust's investment 
decisions. 

4. The underlying trust investments ultimately will revert to the covered member as the grantor. 

C. Beneficiary —If a covered member Is a beneficiary of a trust, then the covered member's interest 
in it is direct and his or her interest in the trust's underlying investments is indirect, unless the 
covered member controls the trust or supervises or participates in its investment decisions, in 
which case the interest becomes direct. 

D. Blind Trust —Because the Investments ultimately will revert to the grantor who typically retains 
the right to amend or revoke, both a blind trust and Its underlying investments are considered to 
be direct financial interests of the grantor. 

IV, Participation in Employee Benefit Plans (EBP) 

A. Independence is impaired if a covered member participates In an employee benefit plan that is an 
attest client or sponsored by one. Two exceptions apply: 

1. When a covered member is an employee of a government organization that sponsors an 
employee benefit plan and the covered member is required by law to audit the plan, then it is 
acceptable to do so if all of the following safeguards are in place: 

a. The covered member is required to participate in the plan as a condition of employment. 

b. The plan is offered to all employees in comparable positions. 

c. The covered member is not a director, officer, employee, promoter, or the like of the plan. 

d. The covered member has no influence or control over the investment strategy, benefits, 
or other management activities of the plan. 

2. When the covered member formerly was associated with an attest client but is no longer, then 
independence is not impaired. 
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- i 

1. Avoid independence problems thgt might arise from auditors using bank accounts and insurance 

policies. 8 

2. Avoid independence problems tiM might arise from investing in the stock market using a 

; Stockbroker..,,,, . | , 


1. Depository Accounts 

A. Firm— Firms may maintain depository accounts at a bank that is an attest client if they conclude 
that the likelihood is remote that the bank will experience financial difficulties. 

B. Individual —Individual covered members may maintain such accounts if any of three conditions is 
met: 

1. The balance In the depository account is fully insured, or 

2. Any uninsured amounts were not materia! to the covered member's worth, or 

3. If uninsured accounts are considered material, they are reduced to an immaterial amount 
within 30 days of becoming material. 

il. Brokerage Accounts 

A. A covered member's brokerage account at an attest client broker-dealer would not impair 
independence only if both of the following apply: 

1. The attest client's services were rendered under the attest client's normal terms, procedures, 
and requirements. 

2. Any covered member's assets subject to the risk of loss are immaterial to the covered 
member's net worth. 

a. In determining risk of loss, the question is not whether the assets' market value might 
decline but whether the client might become Insolvent or commit fraud. Protection by 
regulators and insurance are relevantfactors in determining risk of loss. 

Hi. Insurance Policies 

A. An insurance policy Is not a financial interest unless it offers an investment option. 

B. If there is an investment option, there would still not bean independence problem if the covered 
member bought the policy under norma! terms and conditions, unless the covered member had 
either: 

1. The ability to select the policy's underlying Investments or 

2. The authority to supervise or participate in the Investment decision and the covered member 
invested in an attest client. 
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I. Loans 

A. If a covered member borrows from {or loans to) an attest client or any of its officers, directors, or 10% 
owners, there is likely an independence problem, especially If the client is not a lending institution. 

B. If the attest client is a lending Institution making a loan to covered members or their immediate 
family members, independence would not be impaired if it is (a) an immaterial unsecured loan, 

(b) a home mortgage, or (c) a secured loan, so long as all of these safeguards are met: 

1. Normal lending procedures, terms, and requirements were applied. 

2. The loan occurred before the lending institution become an attest client, or came from a 
lending institution for which independence was not required and later sold to an attest client. 

3. Loans are kept current, and terms are not altered by extending maturity date, lowering 
interest rate, and so on. 

4. The estimated fair value of the collateral equals or exceeds the outstanding balance; any 
deficit is not material to the covered member's net worth. 

C. If a covered member keeps payments current and otherwise complies with loan or lease terms, 
these also do not impair independence: 

1. Auto loans and leases collateralized by the car 

2. Loans fully collateralized by cash surrender value of an insurance policy 

3. Loans fully collateralized by cash deposits at the same lending institutions (e.g., passbook loans) 

4. Aggregate outstanding balances from credit card and overdraft reserve accounts of $10,000 
or less 


A. Capital leases (leases to own) impair independence. 

B. Operating lease arrangements do not impair independence If all of these safeguards are met: 

1. The lease meets the generally accepted accounting principles criteria for an operating lease. 

2. The terms and conditions are comparable with similar leases. 

3. Ail amounts are paid in accordance with the terms of the lease. 

III. Business Relationships 

A. Cooperative Ventures—Cooperating with an attest client to provide services to a third party or to 
develop a product is problematic. A cooperative venture does not exist where all these safeguards 
are present: 

1. Participation of the firm and client is governed by separate agreements that do not create 
obligations between them. 

2. Neither assumes responsibilities for the other's activities or results. 

3. Neither has authority to act as the other's agent. 


32 







Loans, Leases, and Business Relationships 


Joint Closely Held Investments-—Joint financial Investments may create an independence 
problem also. 

1. Permissible: The firm and an attest client could both own the stock of a widely held public 
company, like Microsoft. 

2. Impermissible: 

a. The firm and a client both own material stakes in a small company. 

b. A covered member and an officer of an attestclientjointly buy a sailboat. 
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I. Introduction 

A. Two categories of family relationships create potential independence probiems: 

1 . Immediate family members: Spouses, spousal equivalents, and dependents 

2. Close relatives: Parents, siblings, and nondependent children, 
il. Immediate Family Members 

A. With substantia! exceptions that are about to be spelled out, immediate family members 
of covered members must comply with the same independence rules as covered members 
themselves. They may not work for attest clients or own financial interests In them (unless the 
Interests are both indirect and immaterial). 

B. Irrespective of the exceptions below, Immediate family members cumulatively may not own more 
than 5% of an attest client. 

C. Immediate Family Members Employed by Attest Client —A covered member's immediate 
family members may work for an attest client, just not In a "key position" such as one in which an 
employee has: 

1. Primary responsibility for significant accounting functions that support material components 
of the financial statement; 

2. Primary responsibility for the preparation of the financial statement; or 

3. The ability to exercise influence over the contents of the financial statement, including 
when the individual is a member of the board of directors or similar governing body, chief 
executive officer, president, chief financial officer, chief operating officer, general counsel, 
chief accountancy officer, controller, director of internal audit, director of financial reporting, 
treasurer, or any equivalent position. 

0. Immediate Family Member Participation in an Employee Benefit Plan —Immediate family 
members may not only work for an attest client in a nonkey position, they may also participate in 
an employee benefit plan that is an attest client or is sponsored by an attest client, so long as all of 
the following safeguards are followed: 

1. The plan is offered to all employees in comparable employment positions; 

2. The immediate family member does not serve In a position of governance for the plan; and 

3. The immediate family member does not have the ability to supervise or participate in the 
plan's investment decisions or in the selection of the investment options made available to 
plan participants. 

E. Immediate Family Member Participation in an Employee Benefit Plan with Financial interests in 
an Attest Client—An immediate family member might work for a company that is not an attest client 
but participate in its employee benefit plan and learn that the plan holds stock of an attest client. The 
genera! rule is that in this setting an immediate family member may hold a direct financial interest or 
material indirect financial interest In an attest client If all of the following safeguards are met: 

1. The covered member is neither on the attest team nor in a position to influence. (So, the 
immediate family member could be a 10-hour person or other partner in the office but not a 
team member or in a position to influence in relationship to the attest client); 
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2. Such investment is an unavoidable consequence of such participation; the immediate family 
member had no other investment options available for selection and 

3. If the plan creates an option that would allow the immediate family members to invest in a 
nonattest client, the immediate family members should select that option and dispose of the 
attest client shares as soon as practicable but within 30 days. 


A. Generally, close relatives of covered members must follow the same independence rules as the 
covered members themselves, but the restrictions are looser than for immediate family members 
and they are looser for close relatives of covered members who are not on the engagement team. 

B. Independence is impaired if the close relative of an audit team member has either of the 
following: 

1. A key position with the attest client, or 

2. A financial interest in the attest client that: 

a. The team member knows or has reason to know was material to the close relative, or 

b. Enabled the close relative to exercise significant Influence over the attest client. 

C. Independence is impaired If the close relative of a person In a position to influence or other 
partner in the office has either of the following: 

1. A key position with an attest client, or 

2. A financial interest that: 

a. The person in a position to influence or other partner In office has reason to believe was 
material to the close relative, and 

b. Enabled the close relative to exercise significant influence over the attest client. 

D. There are no specific restrictions on close relatives of 10-hour people (though the 
Conceptual Framework should always be kept in mind). 


35 


Employment 



Current Employment 


lesson, you 

Apply the rulesi hat opr save Independency, prevent various 
from working for an ludit tientina wide range of positions. 


2. Understand the rule iha* jovem a situation where an attest clien; 


work for the audit firm 



an accounting firm 


les to come to 




I. Current Employment 

A. The employment rules focus on partners and professional employees of attest firms. They may 
not, without impairing independence, serve In these roles for an attest client: director, officer, 
employee, promoter, underwriter, voting trustee, or trustee for any pension or profit-sharing trust 
of the client's, or in any equivalent management position. 

B. Professors —Partners and professional employees may serve as adjunct faculty members at a 
college that is an attest client.so long as the following safeguards are ail accurate regarding the 
faculty member. He or she: 

1. Does not hold a key position with the client 

2. Is not on the attest engagement team 

3. Is not in a position to Influence 

4. Is on a part-time and non-tenure basis 

5. Does not participate In any employee benefit plan sponsored by the school, unless 
participation is required 

6. Does not assume any management responsibilities or set policies 

C. Honorary Director or Trustee of a Not-for-Profit Organization —Partners and professional 
employees may lend the prestige of their names to a not-for-profit that is an attest client so long 
as all of the following safeguards are in place: 

1. The position is clearly honorary. 

2. The partner or professional employee cannot vote and takes no management role in the 
organization. 

3. Ail externally circulated materials identify the position as honorary. 

D. Member of an Advisory Board —If criteria similar to those mentioned in the previous section are 
met, partners and professional employees may serve on an attest client's advisory board without 
impairing independence. 

E. Member of Governmental Advisory Committee —Independence considerations do not prevent 
partners or professional employees from serving on a citizen's advisory committee studying 
possible changes in the form of a county government that is an attest client, or on an advisory 
committee appointed to study the financial status of the state in which the county is located. 

F. Campaign Treasurer—independence considerations preclude a firm from auditing a campaign 
organization whose campaign manager is a partner or professional employee of the firm. 

Similarly, if Joe is an elected head of a governmental unitor is a candidate running for that 
position, an audit firm would not be independent in auditing that governmental unit if Joe's 
campaign manager is a partner or professional employee of the firm. However, the firm would not 
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necessarily lack independence to audit Joe's political party. TTie firm should apply the threats and 
safeguards framework to determine whether threats to Independence could be lowered to an 
acceptable level. 

G. Member of Federated Fund-Raising Organization —If a firm's partner or professional employee 
serves as director or officer of a federated Hind-raising organization such as United Way, which 
not only gives funds to a particular local charity but also exercises control over that charity, then 
the firm may not audit that local charity. Even If United Way does not exercise control, there are 
sufficient independence concerns that the Conceptual Framework should be invoked. 

H. Member of Organization that Receives Funds from Fund-Raising Organization —When a 
partner or professional employee is a director of an organization that receives funding from 

a foundation that exists solely to raise funds for that organization, the firm may not audit the 
foundation, unless the directorship Is clearly honorary. 

11. Former Employment or Association with an Attest Client 

A. Independence concerns arise when people who are employed by attest clients or who were 
associated with them as officers, directors, promoters, underwriters, voting trustees, or trustees for 
a pension fund or profit-sharing fund of the clients, join the firm as covered members. 

B. Independence is impaired if one of these people participates as a team member or someone in 
a position to influence when the attest engagement covers any period of time when the person 
was employed by or associated with the audit client. 

C. However, if the people become merely other partners in the office or 10-hour people, then 
independence is not impaired so long as they dissociate themselves from the client prior to 
becoming a covered member. Dissociation Includes all of the following five steps: 

1. Ceasing to participate in all the client's health and welfare benefit plans, unless the client is 
legally required to allow the covered member to participate in the plan (e.g., COBRA), and the 
covered member pays 100% of his or her portion of the cost 

2. Ceasing to participate in all other employee benefit plans by liquidating or transferring all 
vested benefits in the client's defined benefit plans, defined contribution plans, and similar 
arrangements at the earliest permissible 

3. Disposing of any direct or material indirect financial Interest in the client 

4. Collecting or repaying any loans to or from the client other than those specifically permitted 
or grandfathered by the code 

5. Assessing other relationships with the client to determine if they create threats to 
independence that would require the application of safeguards to reduce threats to an 
acceptable level 
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I. Considering Subsequent Employment with an Attest Client 

A. When an attest team member or person in a position to influence is considering employment with 
the attest client, independence Is impaired unless the team member: 

1. Promptly reports such consideration or offer to an appropriate person in the firm, and 

2. Removes him- or herself from the engagement until the offer Is rejected or the position is no 
longer sought. 

B. When a covered member learns that a team member or a person in a position to influence Is 
considering employment with a client and has not taken the steps listed above, that member 
should alert the firm. 

1. The firm must consider what additional procedures may be necessary to provide reasonable 
assurance that the person acted properly. 

2. The policy does not explicitly cover other partners in office or 10-hour people. 

\l Subsequent Employment with an Attest Client 

A. A firm's Independence will be considered impaired when a partner or professional employee goes 
to work for an attest client in a key position, unless all of the following conditions are met: 

1. Amounts due the former employee for ownership interest in the firm and unfunded, vested 
retirement interests are not material to the firm, and the underlying formula used to calculate 
payments remains fixed. 

2. The former employee is not in a position to influence the accounting firm's operations or 
financial policies. 

3. The former employee does not participate or appear to participate in the firm's business and 
is not associated with the firm (even if unpaid). An appearance of participation results from 
such actions as: 

a. The former employee consults with the firm. 

b. The firm provides the former employee with an office and related amenities. 

c. The individual's name is included in the firm's office directory. 

d. The individual's name Is Included as a member of the firm in other membership lists of 
business, professional, or civic organizations, unless designated as retired. 

4. The ongoing attest engagement team considers modifying audit procedures to adjust for 
the risk created by the former employee's knowledge of the audit plan that he or she has 
now taken to tfie client. Also, it should consider whether remaining team members can 
appropriately stand up to a former employee If they have to deal with him or/ her. 

5. if the former employee joins the client in a key position within one year of dissociating 
from the firm, and has significant interaction with the attest engagement team, an 
appropriate professional in the firm should review the subsequent engagement to determine 
whether appropriate skepticism was maintained. 
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B. Sarbanes-Oxley (SOX) imposes stricter rules where public companies are involved. SOX imposes 
a one-year cooling-off period that requires the lead partner, the concurring partner, or any other 
member of the audit engagement team who provides more than 10 hours of audit, review, or 
attest services to observe a one-year cooling-off period before going to work for a client in a 
financial oversight position. The positions that cannot be assumed within the one-year period 
include (a) chief executive officer, chief financial officer, controller, chief accountancy officer, or 
any equivalent officers; (b) any financial oversight role; and (c) any position preparing financial 
statements. If a former audit firm employee violates these rules, independence is impaired. The 
one-year cooling-off period is that year preceding the beginning of the audit, so the cooling-off 
period actually can extend to nearly two years if the member has begun an audit cycle before 
leaving the firm. 
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After studying this lesson, you should be able to: | 

I 
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2. Know the rules thafgovern the giving of gifts and enterta^ent in an attest settlig. 


I. Member of a Social Club —If a covered member belongs to a social club, such as a country club, that 
is an attest client, there should be no independence problem If the membership is primarily a social 
matter. 

li. Memberof a Trade Association— Independence is impaired if a covered member belongs to a trade 
association that is an attest client If a partner or professional employee is employed by or associated 
with a trade association in an important role (director, trustee, etc.), independence is again impaired. 

III. Member of a Common Interest Realty Association (CIRA) —If a covered member buys an interest in a 
condominium, cooperative, or other common Interest realty association, his or her firm may nonetheless 
audit the common interest realty association, but only if all of the following safeguards are met: 

A. The common interest realty association performs functions similar to local governments, such as 
public safety, road maintenance, and utilities; 

B. The covered member's annual assessment is not material to either the common interest realty 
association or the member; 

C. Liquidation of the common interest realty association or sale of common assets would not result 
in a distribution to the covered member; and 

D. The common interest realty association's creditors would not be permitted to recover out of the 
member's assets if the common Interest realty association became insolvent. 

IV. Member of a Credit Union —When a covered member is a member of a credit union and became 
eligible to join only because of the professional services he or she provided to the credit union, 
independence is impaired. However, if the member individually qualifies to join the credit union 
irrespective of professional services provided, then independence is not impaired. 

V. Gifts and Entertainment 

A. Gifts— In dependence Is impaired If the firm, a team member, or someone in a position to 
influence accepts a gift from an attest client, unless the value Is clearly insignificant to the 
recipient. 

B. Entertainment —Entertainment may be accepted without impairing independence so long as it 
is reasonable in the circumstances.The circumstances to be considered include: 

1. Nature of the gift or entertainment 

2. Occasion giving rise to the gift or entertainment 

3. Cost or value of the gift or entertainment 

4. Nature, frequency, and value of other gifts and entertainment 

5. Whether the entertainment was associated with the active conduct of business 

6. Whether other attest clients also participated in the entertainment; and 

7. Client and firm employees who participated in the entertainment 
Vi. Actual or Threatened Litigation 

A. Litigation Between Client and Member —If the client (or its management) sues the audit firm (or 
vice versa), the key question is whether the firm and client are in threatened or actual positions of 
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material adverse interests. A minor dispute or one not related to the engagement (such as a billing 
dispute) would not impair independence. However, the code gives these examples of impaired 
independence: 

1. An attest client's current management sues or seriously threatens to sue firm alleging 
deficiencies in the audit work. 

2. A covered member sues the client's current management alleging fraud or deceit. 

B. Litigation by Client Security Holders —Client shareholders filing a suit claiming securities fraud 
or some other wrong by both the client and the audit firm presumptively does not automatically 
impair independence. But If there are cross-claims between the client and its managers on one 
hand and the attest firm of the other (or a serious risk of them), independence is impaired if there 
is a significant risk that a material settlement or judgment will result. 

C. Other Third-Party Litigation— Litigation by non-shareholder third parties, such as lenders, who 
might also sue the auditor and/or the client is treated similarly. 

D. Final resolution of litigation or other dispute eliminates the independence threat and reduces it to 
an acceptable level. 
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I. Introduction 


A. The code governs provision of nonaudit services to private company audit clients and indicates 
that communications about the following matters that would not normally be considered 
nonaudit services: 

1. The client's selection and application of accounting standards or policies and financial 
statement disclosure requirements; 

2, The appropriateness of the client's methods used in determining accounting and financial 
reporting; 

3, Adjusting journal entries that the member has prepared or proposed for client management 
consideration; ond 

4. The form or content of the financial statement 

B. Covered members should monitor the total amount of their nonaudit services to ensure that 
their total involvement with the client does not become so extensive that it would constitute 
performing a separate service. 

C. Management responsibiHties —Members must not assume any management responsibilities 
of attest clients. "Management responsibilities involve leading and directing an entity, including 
making significant decisions regarding the acquisition, deployment, and control of human, 
financial, physical, and intangible resources." Examples of such impermissible activities include: 

1. Setting policy or strategic direction for the attest client 

2. Directing or accepting responsibility for actions of the attest client's employees except to the 
extent permitted when using internal auditors to provide assistance for services performed 
under auditing or attestation standards 

3. Authorizing, executing, or consummating transactions or otherwise exercising authority on 
behalf of an attest client or having the authority to do so 

4. Preparing source documents, in electronic or other form, that evidence the occurrence of a 
transaction 

5. Having custody of an attest client's assets 

6. Deciding which recommendations of the member or other third parties to implement or 
prioritize 

7. Reporting to those charged with governance on behalf of management 

8. Serving as an attest client's stock transfer or escrow agent, registrar, general counsel or 
equivalent 

9. Accepting responsibility for the management of an attest client's project 
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10. Accepting responsibility for the preparation and fair presentation of the attest client's financial 
statements in accordance with the applicable financial reporting framework 

11. Accepting responsibility for designing, implementing, or maintaining internal control 

11. General Requirements for Performing Nonaudit Services —When covered members do provide 
nonaudit services for an attest client, if other rules do not state otherwise, independence would not 
be impaired if all of the following three safeguards are met. 

A. in order to ensure that the ultimate management of the attest client stays with the client's 
management, the members must determine that the client and its management agree to: 

1. Assume all management responsibilities; 

2. Oversee the service, by designating an individual, preferably within senior management, who 
possesses the skill, knowledge, and/or experience to do the job. The member should assess 
the situation to ensure that the individual is up to the taslc* 

3. Evaluate the adequacy and results of the services performed; and 

4. Accept responsibility for the results of the services. 

B. The members must not assume management responsibilities (as outlined above) and additionally 
must satisfy themselves that the audit client and Its management will: 

1 . Be able to meet the criteria listed in the previous paragraph 

2. Make an informed judgment on the results of the member's nonaudit services 

3. Accept responsibility for making the significant judgments and decisions that are the proper 
responsibility of management 

C. Before performing nonaudit services, members must establish (and document in writing) their 
understanding with the attest client regarding: 

1. Objectives of the engagement 

2. Services to be performed 

3. The attest client's acceptance of its responsibilities 

4. The member's responsibilities 

5. Any limitations on the engagement 

D. If all of these general requirements are met, then independence is not impaired, unless other rules 
(that we are about to explore) so provide. 

E. If the general requirements are met, then a member may: 

1. Provide advice, research materials, and recommendations to assist management in 
performing its functions and making decisions 

2. Attend board meetings as a nonvoting advisor 

3. Interpret financial statements, forecasts, or other analyses 

4. Provide management with advice regarding its potential plans strategies, or relationships 
Mi. Sarbanes-Oxley (SOX) 

A. SOX limits the nonattest (also known as consulting or advisory services) that attest firms may 
provide to attest clients that are public companies. SOX does not apply if the firms are not public 
companies, so the code governs If an accounting firm audits a private company. 

B. SOX limitations on nonaudit services are based on three fundamental notions: (a) accounting 
firms should not audit their own work, (b) auditors should not advocate for their clients, and 
(c) accounting firms should not serve as their clients' managers. 
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C. SOX provides that an Independent auditor cannot perform the following nonaudit services for a 
public company audit client: 

1. Bookkeeping or other services related to the accounting records of financial statements 

2. Financial information systems design and Implementations 

3. Appraisal or valuation services, fairness opinions, or contributions-in-kind reports 

4. Actuarial services 

5. Internal audit outsourcing services 

6. Management functions or human resources 

7. Broker or dealer, investment advisor, or Investment banking services 

8. Legal services and expert services unrelated to the audit 

9. Any other service that the Public Company Accounting Oversight Board (PCAOB) determines 
is impermissible. 

D. SOX does not prohibit attest firms from providing tax services to their attest clients, but PCAOB 
rules do provide that a public company's auditor's independence is impaired regarding a tax client 
if the firm: 

1. Enters into a contingent fee arrangement with an audit client 

2. Provides marketing, planning, or opinion services In favor of the tax treatment of a confidential 
transaction, or if the transaction Is based on an aggressive interpretation of tax law 

3. Provides tax services to members of management who serve in a financial reporting oversight 
roie for a ciient (or to their Immediate family) 

E. SOX requires that rather than the audit client's management selecting the auditor, client audit 
committees should select, evaluate, and compensate the auditors. In addition, these audit 
committees, which are to be composed entirely of outside directors and therefore presumably 
independent of overt management Influence, must preapprove any permitted nonaudit services 
(such as tax services) purchased by a company from its auditor. 

F. Also, when a firm seeks the permission of an audit client's audit committee to provide tax services, 
it must: (a) describe the proposed services in writing to the committee, (b) discuss with the 
committee the potential effects on independence, and (c) document that discussion. 
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After studying this lesson, you should be able to: 

1. Understand the types of nonaudit ser^ces that can be provided to a private company attest client. 

2. Understand the types of nonaudit services that cannot be provided to a private company attest 


Overview 







luTai 


Not impaired 


Services performed for nonflnandal statement purposes* 


^Examples: valuing employee stock option plan, business combination, or appraisals of assets 
and liabilities. 

^Examples: valuing a client's pension or postemployment benefit liabilities. 

^Examples: appraising or actuarial services for tax planning, estate and gift taxation, and divorce 
proceedings. 


Benefit Plan Administration 


Impaired Not impaired 


Communicate summary plan data to plan trustee 


Prepare account valuations 


Prepare and transmit participant statement to plan participants 


Make policy decisions oh client's behalf 


Interpret plan 


concurrence 


Make disbursements on plan's behalf 


Take custody of plaoassets 


Appraisal, Valuation, or Actuarial 

Impaired 

Results would be material to the financial statement and services 
involve high degree of subjectivity* 


X 
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Bookkeeping, Payroll!, and Other Disbursements 


Post client-coded transactions to client's general ledger 


Prepare financial statements based on client's trial balance 
information 


Post client-approved journal entry to client's trial balance 


Propose standard, adjusting, or correcting journal entries 


Generate unsigned checks using client's source documents 


Process a client^ payroll using client-provided records 


Transmit client approved payroll or other disbursement information 
to a financial Institution chosen by client 


Prepare reconciliation for client's evaluation 


Determine or make changes in accounting records without client 
approval 


Approve or authorize client transactions 


Prepare source documents 


Make changes to source documents without client approval 


Accept responsibility to authorize payment of client funds 


Accept responsibility to sign or cosign checks 


Maintain client's bank account, take custody of client funds, or make 
creditor banking decisions for client 


Approve vendor Invoices for payments 


Business Risk Consulting 


Not Impaired 


Assist management in its assessment of client's business risk control 
processes 


Recommend a plan for improving control processes and assisting in 
implementation 


Make or approve business risk decisions 


Present business risk consideration to board on management's behalf 
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Specific Services 


Corporate Finance Corisulting : : 

impaired 

Noi liiipe'is'cd 

Assist in developing corporate strategies . > ■ /V ^ 



Assist in identifying sources of capital jT»eefi‘ng:^W^4''‘^^C’^:^ 



Introduce management to sources of capital meeting clientls criteria :; 5 



Assist management in analyzing effects of proposed tranSactibrts 5' - 


X 

Advise client in transaction negotiations ' j 


.i. 

Assistin drafting glaring documents . " 



Patticipate in transaction negotiations In advisory capacity 

IMHiliB 


Be named asflnanciai advisory in client's offering documents 

iwiw 


Cdmmit the client to a transaction 

"X 


Consurnmate transaction on client's behalf 

X 


Act as a promoter, underwriter, broker-dealer, or guarantor of client’s 
securities 

X 


Act as a distributor of client's offering documents 

X 


Maintain custody of client's securities 

X 



Executive or Employee Search 

impaired 

Not Impaired 

Recommend position description or candidate specifications 


X 

Solicit, screen, and recommend candidates based on client-approved 

criteria. 


X 

Recommend qualified candidates based on client-approved criteria 


X 

Advise employer on employee hiring or benefits 

nn 

X 

Hire or terminate client emplpyees - , ; 

'Hr'- 


Commit clierit to employee compensation or benefits’ 

' ■ 
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Forensic Accounting Services 

Impaired 

Not Impaired 

Expert witness for a dient 

X . 


_ ^ j 

Expert for a large group where attest dienis 

(a) < 20% of members, voting interest, and claims 

(b) are not/ead plaintiffs, and 

(c) do not have sole decision-making power to select expert witness ^ 



Fact witness 


X 

litigation consulting: providing advice to attest client (without serving 
as expert witness) 


X 

Utigatipn consulting: serving as trier of fact, special master, court- 
appointed expert, or arbitrator 

X 


Litigation consulting: mediator 


X 


Information Systems 

Impaired 

Not impaired 

Install or integrate a client's financial information system If It is off-the- 
shelf (not designed by member) 


X 

Assist in setting up client's chart of accounts and financial statement 
format 


X 

Design, develop, install, or Integrate client's information system that is 
unrelated to client's financial statements or accounting records 


X 

Provide'training and instruction to client's employees on information 
and control system 


X 

Perform network maintenance 


X 

Design or develop a client's financial information system 

X 


Make other than insignificant modifications to source code underlying 
a client's existing financial Information system 

X 


Suppt 

inforr 

vise client personnelin the daily operation of financial 
nation system 

X 


ppefate client's network 

X 











specific Services 





Internal 


impaired 


Not impaired 


manGeo 


'emen' 


Recommend 


lentfoi 


Performing ongoing monitoring activities or control activities (e.g., 
reviewing customer credit info as part of sales process) that affects 
execution of transactions 


Performing separate evaluations of a significant control such that 
member is, in effect, performing routine operations built Into client's 


leaving management rely on member's work as primary basis for client's 
assertions on design of operating effectiveness of internal controls 


Determining which, if any, recommendations for Improving internal 
control system should be implemented 


Reporting to board or audit committee on behalf of management 
regarding internal audit affairs 


Approving or being responsible for overall Internal audit work including 
determining internal audit risk and scope, project priorities, and 
frequency of performance of audit procedures 


Being connected with client as employee or in any management 
position (e.g., being listed as an employee in client's directory) 


Investment-Advisory or Management 


Impaired 


Recommend allocation of funds that client should Inivest in various 
asset classes 


Perform bookkeeping and reporting of client's portfolio balance 


Review managemerit of client's portfolio by others to determine if 
managers are meeting client's investment objectives 


Transmit client's investment selection to broker 


Make investment decisions on client's behalf 


Execute transactions to buy or sell for client 


Take custody of client assets, such as a security purchased by client 
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Tax Services 

Assuming that CPA does not baye qustpdy QC-Mn^pjjoyesr^ell^t's^ :i 
funds and that client empfoi«e revlews.andapprovesljsxTefurn prior 
to transmission to taxing authority^and,if reguiredferffling/slgiistax 
return, then: ■ 

Impaired 

Not impaired 


■'•■..Preparing tax return 


X 

• Ttansinb:dr)g returbbnaXing^thpi^ v v • , 


\ 



- - •?'''Vv 


^9 


Representing client in administrative proceedings before taxing .‘.".'r ' 
authority 



-Representing client in^^^oresoive-a 

■iii? 
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After studying this lesson, you should be able to: 

1. Have a good appreciation for how the rules that govern merr^rs in business differ from those that 

govern members in public practice. J 

^ ^ . ^ . 

2. Understand the specifics of professional obligations for memfers in business. 


i. Introduction 

A. Members In business are members who are "employed or engaged on a contractual or volunteer 
basis in an executive, staff, governance, advisory, or administrative capacity in such areas as 
industry, the public sector, education, the not-for-profit sector and regulatory or professional 
bodies."This would include staff accountants. Internal auditors, and other accountants not 
engaged in public practice. 

B. Members in business do not have to worry about Independence rules. They have other 
responsibilities that generally mirror those of members In public practice, so it should not take 
long to master their part of the Code of Professional Conduct. 

lU Conceptual Framework 

A. The Conceptual Framework for members In business generally tracks that of members in public 
practice. Six of the seven threats identified for members in public practice also apply to members 
in business: (a) adverse interest threats, (b) advocacy threats, (c) familiarity threats, (d) self-interest 
threats, (e) self-review threats, and (f) undue influence threats. The examples given differ, naturally, 
because of the difference in work setting. 

B. Examples of adverse interest threats include: 

1. A member in business's close relative Is an Investor In her employer's closest competitor. 

2. A member in business has sued her employer. 

C. Examples of advocacy threats include: 

1. Obtaining favorable financing is dependent on the information that the member in business 
includes in a prospectus. 

2. The member in business gives or falls to give information that he knows will unduly influence 
the conclusions reached by a third party. 

D. Examples of familiarity threats include: 

1. A member in business has a long relationship with a third party and therefore stops reviewing 
the quality of the third-party's work. 

2. A member in business hires a relative as a subordinate. 

3. A member in business regularly accepts gifts or entertainment from a firm that sells goods or 
services to the member's employer. 

E. Self-interest threats include: 

1. A member in business's close relative owns stock In the employer. 

2. A member in business is eligible for a performance-related bonus, and its value will be directly 
affected by the member in business's decisions. 

F. Self-review threats include: 

1. An internal auditor accepts work that she previously performed before she was promoted to 
her current position. 
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2. A member in business accepts work that she previously performed that will be the basis 
for providing another professional service—for example, Sally gives tax advice to her client 
and later, while doing attest work for the client, automatically accepts the validity of the tax 
advice. 

G. Undue influence threats include members In business being pressured to 

1. Become associated with misleading information 

2. Deviate from company policy, Of 

3. Change a conclusion regarding a tax or accounting position. 

H. When attempting to eliminate these threats or reduce them to an acceptable level, members in 
business cannot turn to safeguards generated by their accounting firm, of course, but can turn to 
those created by: 

1. The profession, legislation, or regulation, or 

2. Their employer. 

in. integrity and Objectivity 

A. Offering or Accepting Gifts or Entertainment —Members in business should not accept any 
gifts or entertainment that would violate the law or the policies of other firms of their own 
employer. Gifts or entertainment not reasonable In the circumstances would create a violation of 
the integrity and objectivity rule. 

B. Preparing and Reporting Information —Members in business must never; 

1. Make or direct another to make a false entry; 

2. Fail to correct inaccurate financial statements or entries; or 

3. Sign or permit another to sign a document containing materially false information. 

C. Subordination of Judgment— The rules against subordination of Judgment for members in 
business are essentially identical for those of members In public practice that are contained in Part 
1 of the Code of Professional Conduct. 

D. Obligation of a Member to His or Her Employer's External Accountant— Members in business 
are to"be candid and not knowingly misrepresent facts or knowingly fail to disclose material facts 
to their employers"external auditor. 

E. Educational Services —When teaching at a university or performing other educational services, 
a member in business is viewed as performing professional services and therefore must act with 
integrity and objectivity. 

IV. General Standards 

A. Like members in public practice, members in business must; 

1. Act with professional competence 

2. Exercise due professional care 

3. Adequately plan and supervise performance of professional services 

4. Have sufficient relevant data to back up any conclusions or recommendations they make 

B. Members in business are expected to; 

1. Comply with applicable standards promulgated by bodies like the Securities and Exchange 
Commission and Internal Revenue Service 

2. Not imply that financial statements they are preparing and submitting to third parties were 
prepared in accordance with independence rules when they were not 
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V. Accounting Principles 

A. Like members in public practice, members in business may not claim that financial statements are 
presented in accordance with generally accepted accounting principles when they are not. 

VI. Acts Discreditable—Members in business are held to essentially the same standards as members in 

public practice when it comes to defining discreditable acts, which include: 

A. Discrimination and harassment In employment 

B. Solicitation or disclosure of CPA Exam questions and answers 

C. Failure to file a tax return or pay a tax liability 

D. Negligence in preparing financial statement or other records 

E. Failure to follow the rules for preparation of financial statements required by agencies like 
the Securities and Exchange Commission, Federal Communications Commission, and state 
commissioners 

F. Entering into prohibited indemnification agreements and limited liability provisions 

G. Disclosing confidential information without the employer's permission or the application of 
another recognized exception (such as validly Issued subpoena, etc.) 

H. Promoting or marketing their firm by use of false, misleading, or deceptive ads 

I. Improper (misleading) use of the CPA credential 
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After Studying this iesson, you should be able to: 

1. Recognize the two basic types of'other members"— retl. 

2. Understand that other members should not engage in 



loyed. 


i. Definition —Other members are, by definition, unemployed, retired, or otherwise not working in the 
profession, so most of the code that applies to members In public practice and members in business 
does not apply to them. 

n. Discreditable Acts —Other members are, at a minimum, not to engage in discreditable acts, 
including: 

A. Discrimination and harassment In employment practices 

B. Solicitation or disclosure of CPA Examination questions and answers 

C. Failure to file a tax return or pay a tax liability 

D. Improper disclosure of confidential information obtained from former employment or previous 
volunteer work 

E. False, misleading, or deceptive acts In promoting or marketing services 

F. Improper (misleading) use of the CPA credential 
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I. Introduction 

A. The SEC rules for independence are very similar to AlCPA rules. Although there are some 
differences, the results are usually the same under both approaches. Any student who masters the 
AlCPA Code of Professional Conduct and has knowledge of the SOX requirements and a modicum 
of common sense should be able to handle questions regarding the SEC rules. Nonetheless, this 
lesson outlines those rules in some detail. 

B. Rule 2-01 of the SEC's Regulation S-X provides specific rules regarding auditor independence 
in connection with public company audit clients. It also includes the Sarbanes-Oxley (SOX) 
independence requirements. Remember that if there are any differences between the AlCPA approach 
and the rules of the SEC or PCAOB, the latter take precedence if the audit client is a public company. 

1. Many of SOX's provisions that are relevant here are covered in more detail in the BEC lesson 
on corporate governance, including requirements for retention of audit records, punishment 
for destroying audit documents prematurely, and so on. 

C. SEC independence rules are, overall, concerned with whether a relationship with or provision of a 
service to an audit client: 

1. Createsa conflict of interestforthe auditor; 

2. Results in the accountant auditing his or her own work; 

3. Results in the accountant acting as an audit client's manager or employee; or 

4. Places the accountant in a position of being an advocate for the audit client. 

H. Key Definitions 

A. Financial Reporting Oversight Role (FROR)— A role In which a person is in a position to or does 
exercise influence over the contents of the F/S or anyone who prepares them. Examples: director, 
CEO, president, CFO, COO, general counsel, CAO, controller, director of internal audit, director of 
financial reporting, treasurer, or any equivalent position., 

B. Audit and Professional Engagement Period— Includes the period covered by any F/S being 
audited or reviewed (the"audit period") and the period of the engagement (the "professional 
engagement period"). The professional engagement period begins at the earlier of when the 
accountant signs an initial engagement letter or begins the audit and ends when the audit client 
or the accountant notifies the SEC that the client is no longer the accountant's audit client. 

C. Close Family Member (CFM)—A person's spouse, spousal equivalent, parent, dependent, 
nondependent child, and sibling. 

D. Covered Persons—The following partners, principals, shareholders, and employees of an 
accounting firm: 

1. Audit engagement team, which Includes "all partners, principals, shareholders and 

professional employees participating in an audit, review, or attestation engagement of an 
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audit client, including audit partners and all persons who consult with others on the audit 
engagement... regarding technical or Industry-specific issues, transactions, or events" 
(comparable to AICPA"tGam"); 

2. Chain of command, which includes all persons who: (a) supervise or have direct 
management responsibility for the audit, including at all successively senior levels through 
the accounting firm's chief executive; (b) evaluate the performance or recommend the 
compensation of the audit engagement partner; or (c) provide quality control or other 
oversight of the audit (PTIs); 

3. Any other partner, principal, shareholder, or managerial employee of the accounting firm who 
has provided 10 or more hours of non-audit services (NAS) to the audit client for the period 
beginning on the date such services are provided and ending on the date the accounting firm 
signs the report on the F/S for the fiscal year during which those services are provided, or who 
expects to provide 10 or more hours of NAS to the audit client on a recurring basis (10-hour 
persons); one/ 

4. Any other partner, principal, or shareholder from an "office" of the accounting firm in which 
the lead audit engagement partner primarily practices In connection with the audit (OPIOs— 
other partners in the office). 

E, Immediate Family Member (IFM)— A person's spouse, spousal equivalent, and dependents. 

III. Basic Requirements —To be qualified to audit a public company, a CPA: 

A. Must be registered and in good standing under the laws of his or her state; and 

B. Must be and appear to be independent and capable of exercising objective and impartial 
judgment. 

IV. Financial Relationships— Investments in audit clients can Imperil independence. 

A. Direct Investments— The accounting firm, any of its covered persons or any or their immediate 
family members (IFMs) may not have direct investments in an audit client, such as owning stocks, 
bonds, notes, options, and so on. 

1. A"direct investmenf'inctudes one through an intermediary if: 

a. The firm, covered persons or IFMs, alone or together, either supervise or participate in the 
intermediary's investment decisions, or 

b. The intermediary is a nondiversified mutual fund that has invested 20% or more its 
money in an audit client. 

B. Five Percent Investments —Independence is impaired if any partner, principal, shareholder, or 
professional employee of the accounting firm (and any of their IFMs or CFMs) owns >5% or more 
of the client's stock. 

C. Trustee of a Trust —Independence is Impaired if the accounting firm or any covered persons 
or IFMs serve as voting trustees of a trust or executors of an estate containing an audit client's 
securities, unless they have no authority to make investment decisions for the trust or estate. 

D. Material Indirect Interests —As with the AlCPA Code, accounting firms, covered persons, and 
their IFMs may not only not have direct financial Interests in an audit client (whether material or 
immaterial), they may not have indirect interests that are material. It is permitted for these persons 
to own 5% or less of a d/vers/fiec/investment company, even if the company owns some shares of 
an audit client. 

E. Related Entities—Independence Is destroyed ifthe firm, covered persons, or IFMs; 

1. Have any director material Indirect investment in an entity that is not an audit client where: 

a. An audit client has an Investment in that entity that is material to the audit client and has 
the ability to exercise significant control over that entity, or 

b. The entity has an investment in an audit client that Is material to that entity and has the 
ability to exercise significant influence over that audit client. 
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2. Have any material investment in an entity over which an audit client is able to exercise 
significant influence; or 

3. Have the ability to exercise significant influence over an entity that has the ability to exercise 
significant influence over an audit client. 

V. Other Financia! Relationships—Independence Is impaired if the firm, its covered persons, or their 
IMFs have; 

A. Loans/Debtor Creditor Relationships —Any loan to or from an audit client, its officers or 
directors, or its 10% owners, except for the following loans obtained from a financial institution 
under its normal lending procedures, terms, and requirements: 

1. Automobile loans and leases collateralized by the automobile; 

2. Loans fully collateralized by the cash surrender value of an insurance policy; 

3. Loans fully collateralized by cash deposits at the same financial institution; and 

4. A mortgage loan collateralized by the borrower's primary residence provided the loan was 
not obtained while the covered person was a covered person. 

B. Savings and Checking Accounts —Any savings, checking, or similar account at a bank, savings 
and loan, or similar institution that is an audit client if the account has a balance that exceeds the 
amount insurable by the FDlC,excepfthatanaccounting firm may have an uninsured balance 
provided that the likelihood of the institution experiencing financial difficulties is remote. 

C. Broker-Dealer Accounts —Brokerage or similar accounts maintained with a broker-dealer that Is 
an audit client, if: 

1. Any such account includes assets other than cash or securities; or 

2, The value of assets in the accounts exceeds the amount protected by the Securities Investor 
Protection Corporation (SIPC), which Is $500,000 for securities and $250,000 for cash. 

D. Credit Cards —Any aggregate outstanding credit card balance > $ 10,000 owed to a lender that is 
an audit client. 

E. Insurance Products —Any individual policy issued by an insurer that is an audit client, unless'. 

1. The policy was obtained when the covered person was not a covered person in the firm; and 

2. The likelihood of the insurer becoming insolvent is remote. 

VL Exceptions—Notwithstanding the provisions in the previous two sections, independence will not be 
impaired in these cases; 

A. inheritance and Gifts —Any person who acquires an unsolicited financial interest (as through 
gift or inheritance) will not lose independence If he or she disposes of the interest as soon as 
practicable, but always less than 30 days after the person has knowledge of and the right to 
dispose of the interest. 

B. New Audit Engagement —A person has a financial Interest that would normally impair 
independence but that person did not audit the client's F/S the previous year and disposes of the 
interest before either (a) signing an engagement letter, or (b) commencing any audit procedures. 

C. Employee Compensation and Benefit Plans —An IFM has an Impermissible financial interest 
in an audit client that was an unavoidable consequence of participation in his or her employer's 
employee compensation or benefits program, provided that the financial interest (other than 
unexercised employee stock options) is disposed of as soon as practicable but always no later than 
30 days after the person has the right to dispose of the financial interest. This exception applies to 
IFMs of OPIOs and 10-hour persons. 

VII. Audit Clients' Financial Relationships—CPAs are not independent in these cases: 

A. Investments by the Audit Client in the Accounting Firm—(a) An audit client has, or has 

agreed to acquire, any direct investment in the accounting firm, or (b) the audit client's officers or 
directors own >5% of the equity securities of the accounting firm. 
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B. Underwriting—Their firm engages an audit client to act as an underwriter, broker-dealer, market- 
maker, promoter, or analyst for securities Issued by the accounting firm. 

Vill. Employment Relationships—An accountant Is not Independent if he or she has an employment 
relationship with the audit client such as those listed next: 

A. Employment at Audit Client of Accountant—A current partner, principal, shareholder, or 
professional employee of the accounting firm is employed by the audit client or is a member of 
the board of directors. 


B. Employment at Audit Client of Certain Relatives of Accountant —A CFM of a covered person is 
in an accounting role or FROR at an audit client. 

C. Employment at Audit Client of Former Employee of Accounting Firm 

1. A former partner, principal shareholder, or professional employee at an accounting firm is in 
an accounting or FROR at an audit client, unless the individual: 

a. Does not influence the accounting firm's operations or financial policies; 

b. Has no capital balances in the accounting firm; and 

c. Has no financial arrangement with the accounting firm other than one providing for 
regular payment of a fixed dollar amount (which is not dependent on the revenue, 
profits, or earnings of the accounting firm): 

i. Pursuant to a fully funded retirement plan; or 

ii. in the case of a former professional employee who was not a partner, principal, 
or shareholder of the accounting firm and who has been dissociated from the 
accounting for more than five years that is immaterial to the former employee. 

2. A former partner, principal, shareholder, or professional employee of an accounting firm is 
in an FROR at an audit client (except an investment company, where slightly different rules 
apply), unless the individual was not a member of the audit engagement team during the 
one-year period preceding the date of the initiation of the audit. 


o: 








Example 

. ABC's Audit cycle runs May 15 to May 14. Sandy is on the audit team of, . 

PriceCooperHouse. She resignson June 15, just one month into the audit cycle. She must 
' V ' wait until the end of that cycle and then allow a cornpiete cycle to pass before she can ' 
go to work in an accounting or FROR capacity. Had she quit on May 14,2p;17, she could have started at 
ABC on May T5,2018. Butsince she resigned on June IS, 2017, she must wait until May 15,2019. 

If the Individual worked for the audit firm but did not participate |n the clienr's audit before going to 
workfor the client In an FROR, this Is not considered a problem, 

Persons who provided 10 or fewer hours of attest services during the relevant period are not covered , 
bythe requirement , 

Nor are persons w/ho are employed bythe issuer dueto amerger.or because of an emergency 


situation. 






D. Employment at Accounting Firm of Former Employee of Audit Client— A former officer, director, 
or employee of an audit client becomes a partner, principal, shareholder, or professional employee 
of the accounting firm, unless the individual does not participate in, and is not in a position to 
influence, the audit of F/S covering any period he or she was employed by the audit client. 

iX. Business Relationships 

A. An accountant is not independent If at any time during the audit and professional engagement, 
the accounting firm or any covered person in the firm has any direct or material indirect business 
relationship with an audit client or with persons associated with the audit client in a decision¬ 
making capacity, such as an audit client's officers, directors, or substantial shareholders. 
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B. Exception—An accounting firm or covered persons can provide professional services to an audit 
client or buy services from a client in the ordinary course of business without an impermissible 
business relationship arising. 

X. Non-Audit Services—SOX provisions, as Implemented by the SEC, indicate that independence is 
impaired if an auditor provides any of the following non-audit services (NAS) to a public company 
audit client, unless it Is reasonable to conclude that the results of these services will not be subject to 
audit procedures during the audit of the client's F/S: 

A. Bookkeeping services, including 

1. Maintaining or preparing the client's accounting records 

2. Preparing the client's F/S that are filed with the SEC 

3. Preparing or originating source data underlying the F/S 

B. Financial information systems design and implementation, including: 

1. Directly or indirectly operating, or supervising the operation of, the audit client's information 
system or managing the audit client's local-area network 

2. Designing or implementing a hardware or software system that aggregates source data 
underlying the F/S or generates information that is significant to the client's F/S 

C. Appraisal or valuation services 

D. Actuarial services 

E. Internal audit outsourcing services 

F. Management functions 

G. Human resources, such as: 

1. Searching for prospective candidates for managerial positions 

2. Engaging in psychological testing, or other formal testing or evaluation programs 

3. Undertaking reference checks of prospective candidates for executive or director positions 

4. Acting as a negotiator on an audit client's behalf, such as determining compensation, fringe 
benefits, and so on 

5. Recommending that the client hire a specific candidate for a specific job (although it is okay 
to advise a client on a candidate's competence for financial accounting, administrative, or 
control positions) 

H. Broker-dealer, investment adviser, or investment banking services 

I. Legal services 

J. Expert services unrelated to the audit 

XL Contingent Fees— An accountant Is not independent if It provides any 
service or product to a public company audit client for a contingent fee or 
commission. 

XIL Partner Rotation—SOX mandates that: 

A. There are no requirements that public companies rotate audit firms. 

B. Lead and concurring audit partners must be rotated every five years 
(five on, five off). 

C. Other partners providing more than 10 hours of attest services must be 
rotated every seven years (seven on, two off). 

D. There are exemptions for firms with fewer than five public company audit clients and fewer than 
10 audit partners. 


Note 

Audit arms may provide 
these services to noriaudit 
clients that are public 
companies and to private 
companies (even If they 
are audit clients) so long 
as AlCPA restrictions are 
hllowed. Other NAS, 
such as most tax services, 
may be performed for 
public company audit 
clients, but only if (a) 
preapproved by the client’s 
audit committee and (b) 
disclosed in the client's 
periodic reports filed with 
the SEC 
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Kill. Audit Committee Administration of the Engagement—SOX shifts control of the audit process from 
the CEO and CFO to the audit committee, and an auditor is not independent unless these new rules 
are followed. Both the audit engagement Itself and provision of permitted NAS are to be preapproved 
by the audit committee. 

A. Some NAS provided by the audit firm (those services providing 5% or less of total revenues 
from the audit client during the audit year) do not require preapprova! by the audit committee. 
However, the audit committee must approve of these services before the current audit 
engagement has been completed. 

XIV. Compensation—SOX provides that an accountant is not independent if any audit partner earns or 
receives compensation based on selling NAS to the audit client. 

XV. Quality Controls—An accounting firm's independence will not be Impaired solely because a covered 
person is not independent, provided: 

A. The covered person did not know of the circumstances giving rise to the lack of independence; 

B. The covered person's lack of independence was corrected as promptly as possible once it became 
known; and 

C. The accounting firm has a quality control system In place that provides reasonable assurance that 
independence rules will be complied with. 

D. For firms annually auditing more than 500 companies, their quality control system provides such 
reasonable assurance only if it has the following features: 

1. Written independence policies and procedures; 

2 . An automated system tracking investments of partners and managerial employees that 
might impair independence; 

3 . For all professionals, a system that provides timely information about entities from which the 
accountant is required to maintain Independence; 

4. An annual or ongoing firm-wide training program on independence rules; 

5 . An annual internal inspection and testing program to monitor adherence to independence 
rules; 

6. Notification to all firm employees of the name and title of the member of senior 
management responsible for compliance with independence rules; and 

7. A disciplinary mechanism to ensure compliance. 
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After studying this f«»ssoh you should be able to: 

1. Understand the ethical requir^meotsdf the PCAOB. , ■„ 

2. Recognize situati ■ i ii present threats to compliance with the ethical I’eeuilremeni ■ 

PCAOB. : ; ^ ^ 

3. Apply the ethical requirements and independence rulesof thePCAQB'toSitU^pns :h • >1 .r 
present threats to compliance during an audit of an issuer. 

4. Be able to explain the role the PCAOB plays in goverriing the audit profession, incluiiii \ i 

registering, inspecting and punishing firms that audit public companies. 


I. introduction 

A. In 2002, Sarbanes-Oxley (SOX) replaced decades of self-regulation by public accounting firms 
when it created the PCAOB to govern public company audit firms under the supervision of the 
SEC. 

1. The PCAOB, among other things: 

a. Registers accounting firms that audit public companies 

b. Establishes auditing, quality control, ethics. Independence, and other standards 

c. Inspects firms 

d. Annual inspections are conducted for firms doing more than 100 audits per year. 

e. Inspections occur once every three years for firms auditing fewer companies. 

i. Investigates and punishes wrongdoing 

B. SOX also enacted several provisions relating to auditor Independence—including rules regarding 
which consulting services audit firms can offer to their public company audit clients, rules on 
audit partner rotation and cooling-off periods, and rules on auditor compensation. These rules are 
covered in the previous lesson on the SEC's ethics rules. 

C. This lesson covers rules the PCAOB has Issued on ethics and independence. An earlier lesson 
covered its other major responsibilities (registering public accounting firms, inspecting 
registered public accounting firms, issuing standards for attestation activities and quality control, 
enforcement). 

D. All PCAOB rules must be approved by the SEC, so it is not a surprise that its ethics and 
independence rules are consistent with the SEC requirements explicated in a previous lesson. 

E. Early on, in 2003, the PCAOB adopted the AlCPA's Code of Professional Conduct provisions 
regarding independence as Its own interim standards. Although that version of the Code has 
since been replaced by the current electronic version and the PCAOB has issued many of its own 
rules (discussed below), the substance of the rules remains the same so there remains much 
consistency between PCAOB rules and AlCPA rules regarding independence. However, if the SEC 
and PCAOB issue any rules that are more restrictive than AlCPA rules, they override those AlCPA 
rules for public company audits. 

li. PCAOB Independence and Ethics Rules 

A. Independence Required—Rule 3520 provides that "a registered public accounting firm and 
its associated persons must be independent of the firm's audit client throughout the audit and 
professional engagement."No surprise there. CPAs must comply with not only PCAOB rules and 
SEC rules, but also "all other independence criteria applicable to the engagement." 
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Contingency Fees and Commissions—Rule 3521, consistent with AlCPA rules, provides that 
if a firm or any affiliate provides "any service or product" to an audit client in exchange for 
a contingent fee or commission. Independence Is Impaired. Elsewhere, the PCAOB defines 
contingent fee to include any arrangement In which the amount of a fee is dependent upon a 
specified finding or result being obtained. Consistent with AlCPA rules, a fee is not considered 
contingent if it is fixed by courts or other public authorities and is not dependent on a particular 
finding or result. 

Tax Consulting—Although the SEC and PCAOB considered prohibiting public company audit 
firms from providing any tax services to public company audit clients, they chose not to do so. 
However, Rule 3522 puts some limitations on those tax services by providing that firms are not 
independent if during their audit engagements they provide services related to marketing, 
planning or opining in favor of tax transactions that are: 

1. Confidential—A "confidential transaction" is one that is offered to a taxpayer under 
conditions of confidentiality and for which the taxpayer has paid the advisor a fee; or 

2. Aggressive —An "aggressive tax position transaction”is one initially recommended by the 
accounting firm and a "significant purpose"of which is tax avoidance, unless the proposed tax 
treatment is at least more likely than not to be allowable under applicable tax laws. Examples 
of such impermissible aggressive transactions are ones that are the same or similar to 
transactions the IRS has already determined to be tax avoidance transactions. 

Tax Services for FRORs—Rule 3523 provides that public company accounting firms may also 
forfeit their independence by providing "any tax service"to a person in a "financial reporting 
oversight role" (FROR) at the audit client or to an Immediate family member (IFM) {spouse, spousal 
equivalent, and dependents) of such a person. 

1. FROR is defined as a role in which a person can or does exercise influence over the contents 
of financial statements or anyone who prepares them. Examples of FRORs include: directors, 
CEOs, presidents, CFOs, COOs, general counsel, CAOs, controllers, directors of internal audit, 
directors of financial reporting, treasurers, or other equivalent positions. 

2 , The rule contains three exceptions. Independence is not impaired if the person; 

a. Is in an FROR only because he or she is a member of the client's board of directors 

b. Is in an FROR only because of his or her relationship to an affiliate of the entity being 
audited where the affiliate's financial statements are not material to the consolidated 
financial statements of the audit client or are audited by a different audit firm. 

c. Was not in an FROR before a hiring, promotion or similar change in employment and the 
tax services are: 

I. Provided pursuant to an engagement in process before the change in employment; 
and 

II. Completed on or before 180 days after the employment event 

Approving Permissible Tax Consulting —SOX allows certain tax consulting services to be 
provided to public company audit clients so long as they are pre-approved by the client's audit 
committee. Rule 3524 sets out the procedure for seeking such approval, requiring that the 
accounting firm: 

1. Describe in writing: 

a. The scope of the service, the fee structure for the engagement, and any other related 
agreement between the firm and the audit client. 

b. Any compensation arrangement or other agreement, such as a referral fee or fee-sharing 
arrangement between the firm and any person (other than the audit client) regarding the 
promoting, marketing, or recommending of a transaction covered by the service. 
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2. Discuss with the audit committee the potential effects of the services on the firm's 
independence. 

3. Document the discussion. 

F. Approving Permissible NAS —SOX prohibits audit firms from providing certain non-audit 
services (NAS) related to Internal controls over financial reporting, but allows others if pre¬ 
approved by the public company client's audit committee. Regarding those that are allowed, 

Rule 3525 sets out the procedure for seeking such approval, providing, consistent with Rule 3524 
regarding tax services, that the firm should: 

1. Describe in writing to the audit committee the scope of the service; 

2 . Discuss with the audit committee the potential effects of the service on the firm's 
independence; and 

3. Document the discussion. 

G. Accepting New Audit Clients —Rule 3526 provides that before accepting a public company as a 
new audit client, a registered firm must: 

1. Describe in writing to the audit committee all relationships between the firm and its affiliates 
on the one hand and the client and Its FROR employees as of the date of the communication 
that "may reasonably be thought to bear on independence"; 

2 . Discuss with the audit committee these relationships and their potential effect on 
independence; and 

3 . Document the discussion. 

a. Note; at least annually with respect to each public company audit client a firm should go 
through this three-step procedure regarding existing relationships and affirm to the audit 
committee in writing that It remains independent. 

III. Other PCAOB Ethics Rules 

A. Rule 3502 provides that public accountants have a responsibility to not — knowingly or recklessly, 
by action or omission—contribute to violations of SOX, of PCAOB rules, of federal securities laws, 
or of professional standards. 

B. Rule 3700 establishes advisory groups to assist the PCAOB in establishing its own professional 
standards. 

C. Relatedly, to increase transparency the PCAOB recently required firms to file a form for each issuer 
audit disclosing: 

1. The name of the engagement partner; 

2 . The name, location, and extent of participation ofeach other accounting firm participating in 
the audit whose work constituted at least 5% of total audit hours; and 

3. The number and aggregate extent of participation of all other accounting firms participating 
in the audit whose individual participation was less than 5% of total audit hours. 
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After studyingthis lessoriryou should be able to: 

1. Recognize ituations that present threats to compliance with th^^^^^^irements of the 
Governme^Accpuntatilit^fte Government Auditing Stand^^^g^ 


I. General Accountability Office's Government Auditing Standards—Ethical Principles 

A. The GAO'S guidelines apply to those who conduct audits of: 

1. Government entities (e.g., federal, state and local) 

2. Entities that receive government awards (e.g., colleges, trade schools, charities, local 
governments) in compliance with generally accepted government auditing standards 
(GAGAS) 

3. Independence and ethical principles— Those who audit pursuant to GAGAS are expected to 
audit: 

a. Independently; and 

b. in accordance with these key ethical principles: 

i. The public interest 

ii. Integrity 

iii. Objectivity 

Iv. Proper use of government information, resources, and positions—these are to be 
used for official purposes and not for an auditor's persona! gain 

V. Professional behavior— Includes compliance with all relevant legal, regulatory, and 
professional obligations, avoidance of conflicts of interest, sensitivity to appearance 
of impropriety, and putting forth an honest effort to meet technical and professional 
standards. 

II. Independence introduction 

A. independence comprises: 

1. Independence of mind— Performing an audit without being affected by influences that 
compromise professional judgment enables an auditor to act with integrity, objectivity, and 
professional skepticism. 

2. Independence in appearance —No reasonable and Informed third party should be given 
reason to conclude that the integrity, objectivity, and/or professional skepticism of the auditor 
are compromised. 

B. Time period—Independence must be maintained during: 

1. Any period of time failing within the period covered by the financial statements or subject 
matter of the audit, and 

2. The period of the professional engagement, which begins at the earlier of the signing of an 
initial engagement letter or some other agreement to perform an audit and ends with the 
forma! or informal notification of the termination of the professional relationship or issuance 
of a report, whichever is iater. 
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C. Four Key Independence Considerations 

1. Conceptual framework for making independence determinations 

2. Requirements for and guidance on independence for audit organizations (AOs) structurally 
located within the entities they audit 

3. Requirements for and guidance on independence for performing nonaudit services (NAS) 

4. Requirements for and guidance on necessary documentation of the auditor's independence 


A. Like the AlCPAand many other bodies, the GAO has adopted a conceptual framework for making 
independence determinations for situations where no dear rule applies. If you have mastered 
the AlCPA conceptual framework, you should have little difficulty with the GAO conceptual 
framework. 

B. Like the AlCPA framework, the GAO's conceptual framework involves three steps: 

1 . Identifying threats to independence 

2. Evaluating the significance of the threats identified, both individually and in the aggregate 

3. Applying safeguards as necessary to eliminate threats or reduce them to an acceptable level 

C. If threats are identified and no available safeguards can eliminate them or reduce them to an 
acceptable level, independence is considered to be impaired. 

D. Threats— The following are broad categories of threats to independence which should be 
identified and evaluated; 

1. Self-interest threat— The threat that a financial or other interest will inappropriately 
influence an auditor's judgment or behavior 

2. Self-review threat —The threat that an AO will evaluate its own NAS and not appropriately 
evaluate the results of previous judgments made or actions taken 

3. Bias threat— The threat that an auditor will, as a result of political, ideological, social, or other 
convictions, take a position that Is not objective 

4. Familiarity threat— The threat that aspects of a relationship with management or personnel 
of the audited entity, such as a close or long relationship or involvement of an immediate or 
ciose family member will undermine objectivity 

5. Undue influence threat— The threat that external Influences or pressures will impact an 
auditor's independence and objectivity 

6. Management participation threat— The threat to objectivity resulting from an auditor's 
performing management functions of the audited entity 

7. Structural threat— The threat that an AO's placement within a government entity, in 
combination with the structure of the entity being audited, will impact the AO's ability to 
perform work and report results objectively 

E. Safeguards by the Auditor —A nonexclusive list of safeguards the AO itself might apply to 
eliminate the threats to independence or at least reduce them to an acceptable level include: 

1. Consulting an independent third party, such as a professional organization, a regulatory body, 
or another auditor 

2. Involving another AO to perform or re-perform part of the audit 

3. Having a professional staff member who was not a member of the audit team review the work 
performed 

4. Removing an individual from an audit team 
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F. Safeguards by the Audited Entity—A nonexclusive list of safeguards that might arise from the 

audited entity itself include: 

1. A requirement that persons other than management ratify or approve the appointment of an 
AO to perform the audit (as SOX requires for public companies) 

2. Internal entity procedures ensuring objective choices in commissioning NAS 

3. An entity governance structure that provides appropriate oversight and communications 
regarding the audit organization's services (comparable to the independent audit committee 
required by SOX for public companies) 

G. Threats to independence should be evaluated both individually and in the aggregate. 

H. Threats to independence are not acceptable if they either: 

1. Could impact the auditor's ability to perform an audit \without being affected by influences 
that compromise professional judgment; or 

2 . Could expose the auditor or AO to circumstances that would cause a reasonable and informed 
third party to conclude that Integrity, objectivity, or professional skepticism of the AO, or a 
member of the audit team, had been compromised. 

I. Mitigating Structural Threats— Independence can be threatened when auditors in government 

entities report either to external auditor, to senior management within the audited entity, or to 

both. 

1. Constitutional or statutory safeguards may mitigate the effects of structural threats to 
independence. For external AOs, such safeguards may Include governmental organizations 
under which the AO is: 

a. At a level of government other than the one of which the audited entity is a part (e.g., 
federal auditors may be auditing a state government program, or state auditors may be 
auditing a county government program) 

b. Piaced within a different branch of government from that of the audited entity (e.g., 
legislative auditors audit an executive branch program) 

2 . Structural threats may be mitigated If the head of an AO meets any of the following criteria in 
accordance with constitutional or statutory requirements: 

a. Directly elected by voters of the jurisdiction being audited; 

b. Elected or appointed by a legislative body, subject to removal by a legislative body, and 
reports the results of audits to and is accountable to a legislative body; 

c. Appointed by someone other than a legislative body, so long as the appointment is 
confirmed by a legislative body and removal from the position is subject to oversight or 
approval by a legislative body, and reports the results of audits to and is accountable to a 
legislative body; or 

d. Appointed by, accountable to, reports to, and can only be removed by a statutorily 
created governing body, the majority of whose members are independently elected or 
appointed and are outside the organization being audited. 

3. For AOs undera differentstructure than those justlisted,a//ofthe following safeguards 
should be in place: 

a. Statutory protections to prevent the audited entity from abolishing the AO; 

b. Statutory protection that if the head ofthe AO Is removed, the head ofthe agency reports 
this to the legislative body; 

c. Statutory protection preventing the audited entity from interfering with the initiation, 
scope, timing, and completion of any audit; 

d. Statutory protection preventing the audited entity from interfering with audit reporting, 
findings, conclusions or the manner, means, or timing ofthe AO's reports; 
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e. Statutory protection requiring the AO to report regularly to a legislative body or other 
independent governing body; 

f. Statutory protections giving the AO sole authority over the selection, retention, 
advancement, and dismissal of its staff; and 

g. Statutory access to records and documents related to the agency, program, or function 
being audited and access to officials or others as needed to conduct the audit. 

J. Internal Auditor Independence 

1. Internal auditors working under the direction of the audited entity's management are 
considered independent for purposes of reporting internally if the head of the audit 
organization meets oil of the following: 

a. Accountable to head of the government entity or to those charged with governance; 

b. Reports audit results both to the head of the government entity and to those charged 
with governance; 

c. Located organizationally outside the staff or line management function of the areas 
being audited; 

d. Has access to those charged with governance; and 

e. Is sufficiently removed from political pressure to conduct audits and report findings 
objectively without fear of political reprisal. 

2 . If internal auditors audit external organizations, such as contractors, and no independence 
impairments exist, the auditor is considered an external party to the audited entities. 

IV. Provision of Nonaudit Services to Audited Entities 

A. Before providing NAS to an audited entity, the AO should determine that the audited entity has 
designated an individual with suitable skills, knowledge, or experience as well as a sufficient 
understanding to oversee the services provided by the auditor. 

1. If an AO were to assume management responsibilities for an audited entity, the management 
participation threat would be so great that no safeguards could reduce them to an acceptable 
level. Management responsibilities include leading and directing an entity, including making 
decisions regarding the acquisition, deployment, and control of human, financial, physical, 
and intangible resources. Examples of specific management actions that would impair 
independence include: 

a. Setting policies and strategic direction for the audited entity 

b. Directing and accepting responsibility for the actions of the audited entity's employees in 
the performance of their routine, recurring activities 

c. Having custody of an audited entity's assets 

d. Reporting to those charged with governance on behalf of management 

e. Deciding which of the auditor's or outside third party's recommendations to implement 

f. Accepting responsibility for the management of an audited entity's project 

g. Accepting responsibility for designing, implementing, or maintaining internal control 

h. Providing services that are intended to be used as management's primary basis for 
making decisions that are significant to the subject matter of the audit 

i. Developing an audited entity's performance measurement system when that system is 
material or significant to the subject matter of the audit 

j. Serving as a voting member of an audited entity's management committee or board of 
directors 
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B. Before performing NAS for audited entities, auditors should obtain assurances that audited entity 
management will do all the following: 

1. Assume all management responsibilities 

2. Oversee the NAS by designating a member within senior management who possessed 
suitable skill, knowledge, or experience 

3. Evaluate the adequacy and results of the NAS performed 

4. Accept responsibility for the results of the NAS 

C. Auditors preparing to perform NAS should establish and document their understanding with the 
audited entity's management regarding: 

1. Objectives of the NAS 

2. Services to be performed 

3. Audited entity's acceptance of Its responsibilities 

4. The auditor's responsibilities 

5. Any limitations of the NAS 

D. Routine Activities —Giving routine advice and responding to questions as a direct part of the 
audit are not considered NAS and do not impair independence. Examples of such routine activities 
directly related to the audit Include: 

1. Providing advice to the audited entity regarding an accounting matter relevant to the audit 

2 . Researching and responding to the audited entity's technical questions on relevant tax laws 
as an ancillary part of providing tax services 

3. Providing advice on routine business matters 

4. Educating the audited entity on matters within the technical expertise of the auditors 

5. Providing information to the audited entity that Is readily available to the auditors, such as 
best practices and benchmarking studies 

E. Certain NAS requirements that directly support the audited entity's operations will necessarily 
impair independence. Among others, these Include: 

1. Determining or changing journal entries, account codes or classifications for transactions, or 
other accounting records for the audited entity without obtaining management's approval 

2 . Authorizing or approving the entity's transactions 

3. Preparing or making changes to source documents (e.g., purchase orders, payroll time 
records, general ledgers, customer orders, contracts) without management approval 

F. Obviously, auditors may not accept responsibility for the preparation and fair presentation of F/S 
that the auditor will subsequently audit. 

G. If the auditor has determined that the NAS requirements have been met and that any significant 
threats to independence have been eliminated or reduced to an acceptable level, then the 
following services, unless otherwise expressly prohibited, may be performed for an audited entity: 

1. Recording transactions approved by management 

2. Preparing F/5 based on Information In the trial balance 

3. Posting entries approved by management to the trial balance 

4. Preparing account reconciliations for management's evaluation 

5. Proposing standard, adjusting, or correcting journal entries or other changes affecting the F/S 
to the audited entity's management for Its review and acceptance so long as the auditor is 
satisfied that management understands the nature and impact of the entries 
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H. Internal Audit Assistance—The following will always impair independence when provided to an 
audit client: 

1. Setting internal audit policies or the strategic direction of internal audit activities 

2. Performing procedures that form part of the internal control, such as reviewing and 
approving changes to employee data access privileges 

3. Determining the scope of the internal audit function and resulting work 

I. Internal Control Monitoring —^To perform ongoing monitoring procedures on behalf of 
management that are built into the routine, recurring operating activities of an organization will 
always constitute a management participation threat that imperils independence. 

J. Information Technology Systems Service —Examples of IT NAS that would impair independence 
when provided to an audit client include: 

1. Designing or developing a financial or other IT system that will play a significant role in the 
management of an area of operations that Is or will be the subject matter of an audit 

2. Providing services that entail making other than insignificant modifications to the source 
code underlying such a system 

3. Operating or supervising the operation of such a system 

K. Valuation Services —Providing valuation services that have a material effect on the F/S will impair 
independence if the valuation involves a significant degree of subjectivity. 

L. Miscellaneous NAS— Other NAS requirements that will always impair independence when 
provided to an audited entity include: 

1. Non-tax-disbursement examples: 

a. Accepting responsibility to authorize payment of audited entity funds 

b. Accepting responsibility for signing or cosigning audited entity checks, even if only in an 
emergency 

c. Maintaining an audited entity's bank account or otherwise having custody of its funds or 
making credit or banking decisions for the audited entity 

d. Approving vendor invoices for payment 

2. Benefit plan administration examples: 

a. Making policy decisions on behalf of an audited entity's management 

b. When dealing with plan participants, interpreting the plan document on behalf of 
management without first obtaining management's concurrence 

c. Making disbursements on behalf of the plan 

d. Having custody of a plan's assets 

e. Serving a plan as a fiduciary as defined by ERISA 

3. Investment —Advisory or management examples: 

a. Making investment decisions on behalf of the audited entity's management 

b. Executing a transaction to buy or sell 

c. Having custody of an audited entity's assets, even taking temporary possession of 
securities purchased by an audited entity 
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4. Corporate finance examples: 

a. Committing the audited entitytothetermsof a transaction or consummating a 
transaction in its behalf 

b. Acting as a promoter, underwriter, broker-dealer, or guarantor of audited entity 
securities, or distributor of private placement memoranda or offering documents 

c. Maintaining custody of an audited entity's securities. 

5. Executive or employee personnel matters 

a. Committing the audited entity to employee compensation or benefit arrangements 

b. Hiring or terminating audited entity employees 

6. Business risk consulting examples: 

a. Making or approving business risk decisions 

b. Presenting business risk considerations to those charged with governance on behalf of 
management 

V. Documentation— To establish Independence, auditors should document: 

A. Threat to independence that requires the application of safeguards, along with the safeguards 
applied 

B. Safeguards required if an audit organization Is structurally located within a government entity 
and is considered independent based on those safeguards 

C. Consideration of audited entity management's ability to effectively oversee an NAS to be 
provided by the auditor 

D. The auditor's understanding with an audited entity for which the auditor will perform an NAS 

VI. Professional Judgment— This includes exercising reasonable care and professional skepticism. It 
represents the application of knowledge, skills, and experience. 

A. Professional judgment is used: 

1. In applying the conceptual framework to determine independence in a specific situation 

2. To assign competent staff to the audit 

3. To define the scope of the audit 

4. To determine risk in the audit 

5. To determine sufficient and appropriate audit evidence to support findings 

6. To report results 

7. To maintain appropriate quality control over the audit process 

VII. Competence—The audit staff must possess professional competence adequate to address the audit 
objectives and perform the work in accordance with GAGAS. 

A. Competence derives from education and experience. 

B. Audit firms should have a process for recruiting, hiring, continuously developing, assigning, and 
evaluating staff in orderto maintain a competent workforce. 

C. Competence provides the basis for sound professional judgments. 

VIII. Technical Knowledge—The staff assigned to perform a GAGAS audit should collectively possess the 
necessary technical knowledge, skill, and experience. 
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Continuing Professional Education (CPE) —Auditors performing GAGAS audits should undertake at 
least 24 hours of government auditing CPE every two years. Auditors performing more senior auditor 
responsibilities or more than 20% of their time charged to GAGAS audits must also have 56 hours of 
CPE every two years. 

Quality Control and Assurance—Audit firms performing GAGAS audits must: 

A. Establish and maintain a system of quality control designed to provide the organization with 
reasonable assurances that both the organization and Its staff comply with professional standards 
and applicable legal and regulatory requirements. 

B. Undergo an independent peer review at least every three years. 

C. Adopt policies and procedures that address: 

1. Leadership responsibilities for quality within the AO 

2. Independence, legal, and ethical requirements 

3. Initiation, acceptance, and continuation of audits 

4. Human resources 

5. Audit performance, documentation, and reporting 

6. Monitoring of quality 
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After studying this lesson, you be able to: 


Understand the Depaitmeni 
reguiat^ by ERISA, 


s independence rules for audfting employee benefit plans 


i. Department of Labor —Interpretive Bulletin Relating to Guidelines on Independence of Accountant 
Retained by Employee Benefit Plan. 

A. Employee Benefit Plans (plans) are broadly regulated by the Department of Labor's (DOL's) 
Employee Benefits Security Administration (EBSA) pursuant to the Employee Retirement Income 
Security Act (ERISA). 

B. Statutory law provides that an accountant retained by a plan to examine plan financial 
information and render an opinion on the financial statements and schedules required to be 
contained in a plan's annual report must be "independent" 

C. Unfortunately, despite having been strongly urged to simply adopt AlCPA guidelines for 
independence, DOL's guidelines, contained in 29 CF.R. 2509-75-9, date to the 1970s and are 
inconsistent with modern independence rules. 

D. The rules provide that an accountant will not be considered independent with respect to a plan, 
due to the following; 

1. Financial ties— Independence will be considered to be impaired if during the period of 
the engagement, at the date of the opinion, or during the period covered by the financial 
statements, "the accountant or his or her firm or a member thereof had, or was committed to 
acquire, any direct financial Interest or any material Indirect financial interest in such plan, or 
the plan sponsor.. 

a. Because this provision covers any member of an accountant's firm, its coverage is much 
broader than that of current AlCPA guidelines. 

b. The term member means all partners or shareholder employees in the firm and all 
professional employees participating in the audit or located in an office of the firm 
participating in a significant portion of the audit. 

2. Employment ties— During the same period, the same entities may not be connected to a 
plan or plan sponsor as a: 

a. Promoter; 

b. Underwriter; 

c. Investment advisor; 

d. Voting trustee; 

e. Director; 

f. Officer; or 

g. Employee of the plan or plan sponsor. 

3. However, employees of a plan or plan sponsor who have left to join the accounting firm may 
nonetheless be deemed Independent if: 

a. They have completely disassociated themselves from the plan or plan sponsor; and 

b. Do not participate in auditing financial statements of the plan covering any period of his 
or her employment by the plan or plan sponsor. 
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4. However, independence may be considered impaired if an accountant or a member of an 
accounting firm maintains financial records for the plan. An accounting firm should not audit 
its own work. 

According to the rule, an engagement to provide professional services, including actuarial 
services, to the plan sponsor does not ruin an accountant's Independence so long as the 
accountant does not violate the rules on financial ties and employment mentioned above. 

However, the firm should take care not to engage in a prohibited transaction pursuant to 29 
U.S.C. 1106(a)(1)(C), which prohibits certain transactions between a plan and a party in interest to 
minimize conflicts of interest and thereby prevent fiduciaries from lining their own pockets with 
the plan's funds. 
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After studying this lesson^ you should be able to: 

Explain the respective responsibilities of marvagemeht ahdtheauditot' i^^ reporting. 

! \0u role of and distinction betv»/een GMp and GAj^. 


I. Financial Accounting—The accounting focuses primarily on the preparation and distribution of the 
general-purpose, historical financial statements (balance sheet, income statement, statement of cash 
flows, and statement of retained earnings), which are representations of management. 

A. These financial statements are distributed to interested parties outside of the reporting entity 
itself, such as actual or potential shareholders and creditors, major customers and suppliers, 
employees, regulators, and others for their decision-making (resource allocation) needs. 

B. Users' specific decision-making circumstances will Involve different issues and they may 
have different information priorities and concerns, but most will want to evaluate whether 
management has performed well. 

C. Since management's performance will be evaluated, at least In part, by financial statements 
prepared by management itself, users need to know whether the financial statements are reliable 
when evaluating the performance of management. 

II. Auditing—The auditor's primary role is to provide an impartial (independent) report on the reliability 
of management's financial statements. 


Purpose of an audit—"The purpose of an audit is to provide financial statement users with an 
Obmioh bytheaMditoron whether the financial statements are presented fairly, in all material 
f€5pecfs> ih accordance with the applicable financial reporting framework. An auditor's opinion 
enhances the degree of confidence that the intended users can place in the financial statements." 

From the-AICPA's Preface to Codifications of Statements on Auditing Standards, Principles Underlying an 
Audit ipnducted.in Accordance with Generally Accepted Auditing Standards, 


III. The Role of Standards—Think of "standards" as the criteria by which quality will be evaluated. The 
preparation of the financial statements and the performance of the audit are subject to very different 
standards. 

A. Standards applicable to evaluating the presentation of the financial statements: 


Applicable financial reporting framework—"The financial reporting framework adopted by 
I Tnanagernent and, where appropriate, those charged with governance in the preparation of the 
pnancialstaternents that is acceptable in view of nature of the entity and the objective of the 

;/iinanciarstatements, or that is required by law of regulation." ^ 

Financial reporting framework—"A set of criteria used to determine measurerhent, recognition, . 
presentation, and disclosure of all material items appearing in the financial staternents; for example: U.S. 
i I generaily accepted accounting principles (GAAP), International Financiai Reporting Standards (IFRSs), 
g^isltied tiy the International Accounting Standards Boafd (iASB),-bf a special purpose framework.", 


1. The financial reporting framework adopted by an entity for its financial statement 
presentation in the U.S. may be based on IFRSs (issued by the iASB) or U.S. GAAP. 
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2. Accounting Standards Setters Associated with U.S. GAAP—The nature of the reporting 
entity determines which particular accounting standards must be followed under the label of 
U.S. GAAP. 

a. Federal governmental entitles follow pronouncements of the Federal Accounting 
Standards Advisory Board (FASAB). 

b. State and local governmental entities follow pronouncements of the Governmental 
Accounting Standards Board (GASB). 

c. Other entities (such as corporations) follow pronouncements of the Financial Accounting 
Standards Board (FASB). 

B. Standards Applicable to Evaluating the Auditor's Performance 

1. Outside the U.S.—"International Standards on Auditing"(ISAs) are issued by the International 
Auditing and Assurance Standards Board, an audit-related standard-setting body within the 
International Federation of Accountants, known as IFAC. 

2. Within the U.S, —^The nature of the reporting entity determines which auditing standards are 
applicable to an audit of the entity's financial statements. 

a. Governmental entities —When required by law, regulation, or agreement, Generally 
Accepted Government Auditing Standards (GAGAS), issued by the U.S. Government 
Accountability Office (GAO) are applicable. 

b. Public companies (companies registered with the Securities and Exchange 
Commission, also referred to as"issuers"that Is, issuers of securities to the public)— 

The auditing standards of the Public Company Accounting Oversight Board (PCAOB) are 
Applicable. 

c. Private companies (referred to as "nonissuers") and other entities— The auditing 
standards of the AlCPA's Auditing Standards Board are applicable; these pronouncements 
collectively are referred to by the AlCPA as generally accepted auditing standards (GAAS). 


ICPA's"clarityiand convergence"project— tA aiCPA reissued substitialiy gli of their existing 
Statetpents onj Auditing Standards (SASs) in a ^rifled format intendec|tp make the SASs easier to 
understand. !niaddit|on, the AiCPA substantiai®onver^ed their auditfigstandards to be consistent | 
with the mquiremeritsoflF^Cs Internatipnal SidafdsOnAMcIft^^^^^^ some differences in 

those respective reqjjiremehts remain (and wtfte covered elsewhere |i CPAexcel^, those standards 
are now very, very sihillan The recent AiCPA pt Jouncements aj&refer^ to as "Clarified Standards." 

The PCAOB adbpWthe then-listing AICPA auditihp'^fcards in Ap j 2003 as "interim standards, on 
an initial, transitional basis." Sincethat time, the PCAOB;l^|been issulr^ its own Auditing Standards. 
Much of the existing PCAOB auditing standards remain of the Al|pA existing as of April 16,2003 
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After studying this lesson, you should be able to: 

1. Identify the seven principles underlying an audit conducted in accordance with GAAS under the 
AlCPA's "Clarified" auditing standards. 


I. Generally Accepted Auditing Standards (GAAS) —Historically, the AlCPA identified 10 standards 
comprising GAAS that used to serve as a framework for U.S. auditing standards. The AlCPA replaced 
these 10 standards with seven principles in connection with its Clarified Auditing Standards.The 
AlCPA no longer uses the term GAAS to refer to these 10 standards representing criteria to measure the 
quality of the auditor's performance. Instead the AlCPA now uses the term GAAS to refer to the body of 
authoritative professional standards issued in the form of Statements on Auditing Standards. 

II. Clarity and Convergence Project —In connection with its clarity and convergence project the AlCPA 
has replaced its Statements on Auditing Standards to be similar to the Internationa! Standards on 
Auditing (ISAs) issued by the International Federation of Accountants {specifically IFAC's International 
Auditing & Assurance Standards Board—lAASB). As part of that effort, the AlCPA has also replaced its 
use of 10 criteria formerly known as "Generally Accepted Auditing Standards" with seven principles to 
provide a framework for understanding and explaining an audit. 

A. The seven principles are not requirements and have no authoritative status. However, they are 
intended to be helpful as a framework for audit standard setting. 

B. The seven principles reflect most of the considerations that had been addressed in the previous 10 
generally accepted auditing standards (the former reporting standards seem to have changed the 
most relative to these principles). 

C. The seven principles are organized around four primary themes—(1) purpose/premise; (2) 
responsibilities; (3) performance; and (4) reporting (as a memory aid, remember: PR-PR). 

Hi. Purpose of an Audit and Premise Upon Which an Audit Is Conducted 

A. The purpose of an audit is to provide financial statement users with an opinion by the auditor 
on whether the financial statements are presented fairly, in all materia! respects, in accordance 
with the applicable financial reporting framework. An auditor's opinion enhances the degree of 
confidence that intended users can place In the financial statements. 

B. An audit In accordance with generally accepted auditing standards is conducted on the premise 
that management and, where appropriate, those charged with governance, have responsibility for 

1. The preparation and fair presentation of the financial statements in accordance with the 
applicable financial reporting framework; this includes the design, implementation, and 
maintenance of internal control relevant to the preparation and fair presentation of financial 
statements that are free from material misstatement, whether due to fraud or error 

2. Providing the auditor with ail Information, such as records, documentation, and other 
matters that are relevant to the preparation and fair presentation of the financial statements; 
any additional information that the auditor may request from management and, where 
appropriate, those charged with governance; and unrestricted access to those within the 
entity from whom the auditor determines It necessary to obtain audit evidence 

C. Responsibilities—Note that the term responsibilities principle takes the place of what previously 
had been called genera/standards describing characteristics the auditor brings to the 
engagement. 

1. Auditors are responsible for having appropriate competence and capabilities to perform the 
audit; complying with relevant ethical requirements; and maintaining professional skepticism 
and exercising professional judgment, throughout the planning and performance of the audit. 
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D. Performance—Note that the term performance principle takes the place of what previously had 
been called fieldwork standards governing the auditor's evidence-gathering activities. 

1. To express an opinion, the auditor obtains reasonable assurance about whether the financial 
statements as a whole are free from material misstatement, whether due to fraud or error. 

2. To obtain reasonable assurance, which Isa high, but not absolute, level of assurance, the 
auditor 

a. Plans the work and properly supervises any assistants 

b. Determines and applies appropriate materiality level or levels throughout the audit 

c. Identifies and assesses risks of material misstatement, whether due to fraud or error, 
based on an understanding of the entity and its environment, including the entity's 
internal control 

d. Obtains sufficient appropriate audit evidence about whether materia! misstatements 
exist, through designing and implementing appropriate responses to the assessed risks 

3. The auditor is unable to obtain absolute assurance that the financial statements are free from 
material misstatement because of Inherent limitations, which arise from 

a. The nature of financial reporting 

b. The nature of audit procedures 

c. The need for the audit to be conducted within a reasonable period of time and so as to 
achieve a balance between benefit and cost 

E. Reporting 

1. Based on an evaluation of the audit evidence obtained, the auditor expresses, in the form of a 
written report, an opinion in accordance with the auditor's findings, or states that an opinion 
cannot be expressed. The opinion states whether the financial statements are presented fairly, 
in all material respects, in accordance with the applicable financial reporting framework. 
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. lesson, yoi should be abit lo !• 

Understand the roie of guicjance associated with Statement'* on guditing Standards including 
Interpretive publications arid other auditing publications.' i 

. I ' ^ ... 

identify the two types of prbfessional requirements (uncdiiditjoral requirements and presumptively 

mandatory requirements) M the wording associated with eadilp 


I. The AlCPA's Use of the Term GAAS and Guidance Associated with It 

A. Statements on Auditing Standards (SASs) —^The SASs constitute GAAS and must be followed 
by auditors when AlCPA auditing standards are applicable. (Specifically, the Rule of Conduct, 
Compliance With Standards, of the AlCPA Code of Professional Conduct requires that auditors 
adhere to the standards promulgated by the Auditing Standards Board.) Under the clarified 
auditing standards, any reference to GAAS now specifically means this authoritative body of 
professional standards (SASs) issued by the Auditing Standards Board. 

1. The auditor is expected to have sufficient knowledge of the SASs to identify those applicable 
to the audit. 

2. The auditor should be prepared to justify any departures from the SASs. 

3. Materiality and audit risk also underlie the application of the SASs, particularly those related 
to performing the audit (evidence gathering) and reporting. 

B. Interpretive Publications— Consist of the appendices to the SASs, auditing Interpretations of 
the SASs, auditing guidance included In AlCPA Audit and Accounting Guides, and AlCPA auditing 
Statements of Position. 

1. Interpretive publications are not considered to be auditing standards, however. 

2. These are issued under the authority of the Auditing Standards Board after all ASB members 
have had an opportunity to comment on the interpretive publication. 

3. Auditors should be aware of (and consider) interpretive publications applicable to their audits. 
When auditors do not apply such auditing guidance, they should be prepared to explain how 
they complied with the SAS provisions related to such interpretive publications. 

C. Other Auditing Publications —Include articles In the Journal of Accountancy and the AlCPA's 
CPA Letter (and other professional publications), continuing professional education programs, 
textbooks, etc. 

1. Other auditing publications have no authoritative status—they may be useful to the auditor 
in understanding and applying the SASs, however. 

2. To assess the appropriateness of the other auditing publications—consider the degree to 
which the publication Is recognized as helpful In applying the SASs and the degree to which 
the author is recognized as an authority on auditing matters. (Other auditing publications 
reviewed by the AlCPA Audit and Attest Standards staff are presumed to be appropriate.) 

II. Categories of Professional Requirements —^The various AlCPA standards (i.e., Statements on 
Auditing Standards, Statements on Standards for Attestation Engagements, Statements on Standards 
for Accounting and Review Services, and Statements on Quality Control Standards) distinguish 
between two types of professional requirements; 
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A. Unconditional requirements—Must comply with the requirement 
without exception (indicated by"must"ln applicable standards); 

B. Presumptively mandatory requirements —In rare circumstances, the 
practitioner may depart from such a requirement, but must document 
the justification for the departure and how the alternate procedures 
performed were adequate to meet the objective of the requirement 
(indicated by"shou!d"in applicable standards). 


Note 

Explanatory material 
Is descriptive guidance 
within the body of the 
standards that does not 
impose a requirement 
(indicated by may, might, 
or could in applicable 
standards). 
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After studying this lesson, you should be able to: 

1. tnf tHiJlionshipoKjA/'OioihoAICi As‘'l.jlemrnf-on OiMlilyConirol Standards (S>QLS) 

2. List the six elements that comprise a firm's quality control system. 


I. Relationship of GAAS to the SQCS —An Individual audit engagement is 
governed by GAAS, whereas a CPA firm's collective portfolio of accounting 
and auditing services (sometimes called the A&A practice, which involves 
entities'financial statements and, thereby, Involves the public interest) 
is governed by the AlCPA's SQCS. SQCS are issued by the AlCPA's Auditing 
Standards Board (in particular, the section of the SQCS dealing with "A Firm's 
System of Quality Control"is QC10).The relevant AlCPA guidance applicable 
to an individual audit engagement is provided by AU 220, Quality Control for 
an Engagement Conducted in Accordance with [GAAS]. 

II. Focus of the System of Quality Control —A CPA firm is required to have a 
"system of quality control" for its accounting and auditing services (covering 
audit, attestation, compilation, and review services; note that the SQCS 
are not applicable to tax or consulting services) to provide reasonable 
assurance that engagements are performed in accordance with professional 
standards and applicable regulatory and legal requirements, and that the 
issuance of reports are appropriate in the circumstances. 

A. Nature and Scope— The policies and procedures will vary with the 
circumstances (e.g., firm size and number of offices, complexity of 
services offered, and the level of experience of the professional staff). 

B. Inherent Limitations— Similar to any internal control system, a quality control system provides 
"reasonable"(a high, but not absolute) assurance, reflecting implicit cost-benefit trade-offs. 

Ml. Six Elements of a Quality Control System— These are interrelated (e.g., monitoring and the quality of 
personnel involved affect the other elements). 

A. Leadership Responsibilities for Quality— Policies and procedures 
should promote an internal culture that emphasizes a commitment to 
quaiity (sometimes called the "tone at the top"). For an Individual audit 
engagement, the engagement partner should take responsibility for 
overall audit quaiity, although performance of certain procedures may, 
of course, be delegated to other members of the engagement team. 

B. Relevant Ethical Requirements —Policies and procedures should 
address the independence of personnel as necessary (should obtain 
written confirmation of compliance with independence requirements 
from ail appropriate personnel at least annually). 

C. Acceptance and Continuance of Client-Relationships and 

Engagements—Policies and procedures should carefully assess 
the risks associated with each engagement (including issues related 
to management integrity) and the firm should only undertake 
engagements that can be completed with professional competence. 

D. Human Resources—Policies and procedures should address important personnel issues 
(including initial hiring, assignments to engagements, professional development and continuing 
professional education, and promotion decisions). 


Note 

If the engagement 
team identifies a. thmit 
to independence that 
safeguards may note 
eliminate or reduce^o 
ah dct^tdbleieveiithe m 
engagement partner is 
required to report the 
mailer lo the relevant 
personfs) in the firm to 
determine the appropriate 
action (to either eliminate 
the threat or withdraw 
from the engagement 
when withdrawal is 
allowed under applicable 
lav/or regulation). 


Note 

The purpose ofAU220, 
Quality Control foran 
Efigageinent^ndiKted^ 
ifi Accordance with 
IGAASl.iStoassistthe , 
auditonn implementing 
the firm's quality control , ' 
procedures specifically 
atthedngagemenifeveC^ 
This pronouncement : ■ 

states thatthe auditor's 
objective is to.Implement: ■-< 
quality- control procedures, 
at the engagement level' 
that provide reasonable-' • 
assurance that{a) the ' ' 
auditcomplies with 
professional standards 
and applicable legal and . 
regulatory requirements 
and (b) the auditor issues 
an appropriate report 
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Quality Control Standards (SQCS) 


i. Engagement Performance—Policies and procedures should focus on compliance with 
all applicable firm and professional standards and applicable regulatory requirements, and 
encourage personnel to consult as necessary with professional (or other) literature or other 
human resources within or outside of the firm for appropriate guidance. 

F. Monitoring—Policies and procedures should provide an ongoing assessment of the adequacy 
of the design and the operating effectiveness of the system of quality control. Controls that 
are effective at one point in time, may deteriorate over time owing to neglect or changed 
circumstances. It is important that the controls are properly monitored so that timely adjustments 
can be made as necessary to keep the quality control policies and procedures working effectively 
over time. 

Differences of Opinion—The firm should establish policies and procedures for dealing with and 
resolving differences of opinion within the engagement team, with those consulted, and between the 
engagement partner and the engagement quality control reviewer (Including that the conclusions 
reached are documented and implemented and that the report is not released until the matter is 
resolved). 

Documentation of the Operation of Quality Control Policies and Procedures —The firm should 
establish policies and procedures requiring appropriate documentation of the operation of each 
element of the system of quality control. 

Definitions 

A. Engagement Partner— The person in the firm who is responsible for the audit engagement and 
Its performance and for the auditor's report. 

B. Engagement Quality Control Review— A process designed to provide an objective evaluation, 
before the report is released, of the significant judgments the engagement team made and the 
conclusions it reached in formulating the auditor's report (The engagement quality control review 
process is only for those audit engagements, if any, for which the firm has determined that an 
engagement quality control review is required, in accordance with its policies and procedures.) 

C. Engagement Quality Control Reviewer— This is the person in the firm, a suitably qualified 
external person, ora team made up of such individuals, none of whom is part of the engagement 
team, with sufficient and appropriate experience and authority to objectively evaluate the 
significant judgments that the engagement team made and the conclusions it reached in 
formulating the auditor's report. 

. The Main Difference Between the Clarified $AS and the Corresponding International Standard 
on Auditing— The SAS requires that the quality control review must be completed before the 
engagement partner releases the auditor's report, whereas the ISA requires that the quality control 
review be completed before the engagement partner dates the auditor's report. 





After studying this lesson, you be able to: 

t. Identify the primary dimelsio^^phe audit process; a) engagement planing; b) internal control 
considerations; c) substan|ve ^^procedures; and d) reporting. 


I. Engagement Planning 

A. Decide whether to accept (or continue) the engagement—Recall the quality control standards 
regarding client acceptance/continuation Issues. 

B. Perform risk assessment procedures to address the risks of material misstatement, whether due to 
error or fraud. 

C. Evaluate requirements for staffing and supervision. 

D. Prepare the required written audit plan (sometimes called the audit program) that specifies the 
nature, timing, and extent of auditing procedures for every audit area (which is usually prepared 
after control risk has been assessed, so that detection risk can be appropriately set in each audit 
area). 

il. Internal Control Considerations 

A. Obtain an understanding of internal control for planning purposes as required, emphasizing 
the assessment of the risk of material misstatement in Individual audit areas and document the 
understanding of internal control. 

B. If contemplating reliance on certain identified internal control strengths as a basis for reducing 
substantive testing, the auditor must then perform appropriate tests of control to determine that 
those specific controls are operating effectively, that Is, working as intended. 

III, Substantive Audit Procedures (Evidence-Gathering Procedures Whose Purpose is to Detect 
Material Misstatements, if There Are Any) —Note that the word substantive is derived from 
substantiate, which means fo ver/7y. These are evidence-gathering procedures designed to verify the 
financial statement elements and to detect any material misstatements. 

A. Analytical Procedures— Those evidence-gathering procedures that suggest reasonableness 
(or unreasonableness) based upon a comparison to appropriate expectations or benchmarks, 
such as prior year's financial statements, comparability to Industry data (including ratios) or other 
interrelationships Involving financial and/or nonfinancial data. 

B. Tests of Details —Those evidence-gathering procedures consisting of either of two types: 

1. Tests of ending balances —Where the final balance Is assessed by testing the composition 
of the year-end balance (e.g., testing a sample of individual customers'account balances that 
make up the general ledger accounts receivable control account balance). 

2. Tests of transactions —Where the final balance is assessed by examining those debits and 
credits that caused the balance to change from last year's audited balance to the current 
year's balance. 

IV. Reporting—Conclusions are expressed in writing using standardized language to avoid 
miscommunication. 
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After studying thi& lesson, you should be sible to: 

1. Describe the structure and content of the so-olled standard unqualified audit report under 
. AiCPA's Clarified Standards. ■ ' ^ 

I. Prior to the issuance of the Clarified Standards, the so-called standard unqualified audit report under 
AlCPA Professional Standards consisted of three paragraphs (comprised of a total of nine sentences). 
The change in the audit reporting language Is one of the major differences caused by the Clarified 
Standards. 

A. introductory Paragraph —^Three sentences: 

1. Identify the entity's financial statements. 

2. Identify management's responsibilities. 

3. identify the auditor's responsibilities. 

B. Scope Paragraph —^Five sentences: 

1. Audit is conducted in accordance with GAAS. 

2. Audit provides reasonable assurance. 

3. Audit examines evidence on a test basis. 

4. Audit includes assessing accounting principles used and significant estimates made. 

5. Audit provides a reasonable basis for the opinion. 

C. Opinion Paragraph— One long sentence: 

1. Express an opinion that the financial statements are fairly stated in conformity with GAAP (or 
other applicable accounting framework). 


A sample,unqualified audit report under the "old" (now superseded) standards is provided belpyy, so , 
that the differences relative to the sample unqualified audit report under the "new" Clarified Standards 
will .be more clearly recognized. ... ; : ^; 


Standard Unqualified Auditor's Report—Under the "Old" AiCPA Professional Standards 

Independent Auditor's Report 

- We have audited the balance sheets of ABC Company at December 31,;2()X^ahd 20XT,:arid;the';related 
statements of incbrne, retained earnings, and cash fltws for the years theri ended.Ttee 
: statements arethe responsibility of the Company's managemer^t. Our responsibility is to express an 
P'bpinipnortthesefinanciaf statements based bn our audits. , 


' Weconducted our audits in accordance, with auditing ^hdards generally accepted ih:the yn|t^^ 
Statesof America. Those standards require that we plan and perform thbaudlt to bbtaih feasofi^ 
assurance about whether thefinancial statementsare free of material misstatement. An audit 
includes examining, on a test basis, evidence suppprtmgthe a.mountsand disclosures in the financial 
statements. An audit also includes assessmg the acccunting.prlndpjes used and significant Estimates ; 
made by management, as well as evaluating the bverailfifiaridal statement presentatibn. We believe^ 
that our audits provide a reasonable basis for our opinion. 
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Assessing Risk and Developing a Planned Response 


inouropinior 
financial poj 
and their ca; 
accepted in tf 

/s/ CPA firm {signed by audit ei^agement partner) 

Patedheauli r« | r should* i .> dated ^ariier than the daii on aIh h ,|ih auditor has obtained 
sufficient ap , ii m itevidei* i*’‘uppoit the opinion) 


> ii K (il siate*ni itD Kferrmio i ont fairly, in dll materidl respects, the 
I I * 'unpany .tl)«<imbi» ■>> “nd 20X1, and the results of their operations 
I ' i>i yearsiliui* ruled II <(>i.icctMtyiMthdccountingpnnapiesgenera1Jy 
United StatesofAmerica. 


H. Auditor's Report—Under the AlCPA's Clarified Standards, the auditor's report has been reformatted 
and expanded to reflect four main sections: 

A. The first section has no label, but it identifies the nature of the engagement and the entity's 
financial statements involved (consists of one sentence). 

B. The second section is labeled Management's Responsibility for the Financial Statements— 

(1 sentence) it states that management is responsible for the fair presentation of the financial 
statements and the implementation of internal control. 

C. The third section is labeled Auditor's Responsibility, \whlch consists of three separate paragraphs. 

1. The first consists of three sentences: 

a. Responsibility to express an opinion 

b. Conducted the audit in accordance with (GAAS) 

c. Plan and perform the audit to provide reasonable assurance. 

2. The second consists of five sentences; 

a. Perform procedures to obtain audit evidence about the amounts and disclosures. 

b. The procedures depend on the auditor's judgment, including assessment of risks of 
material misstatement, whether due to fraud or error. 

c. In making those risk assessments, the auditor considers interna! control. 

d. The auditor expresses no such opinion (on internal control, when not engaged to report on 
internal control in an "integrated audit"). 

e. An audit includes evaluating the appropriateness of accounting policies used and the 
reasonableness of significant accounting estimates. 

3. The third consists of one sentence—expressing the auditor's belief that the audit evidence is 
sufficient and appropriate to provide a basis for the opinion. 

D. The fourth section is labeled Opinion —(one sentence) it expresses the auditor's opinion (in the 
same wording as that used in the previous AlCPA standards). 


in the Clarified kandards,theAICPAhasreplacedthetermi/nq|a//ffed With unmodified.Jwo 
versions of the sample unmodified auditor's report are provided below. The first presents the typical 
unmodified audit report in paragraph form; ^ndthe'^pnd presents it on a sentence-by-sentence 
basiS'foTfia'se of review., ' -"'y 
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Overview of Auditor's Report 


Sample Unmodified Auditor"® BeportUnder AlCf^A CfarlBed Standards 

Independent Auditor's Report 
[Appropriate Addressee] 

We have audited the accompanying consolidated financial statements of ABC Company and its > 
subsidiaries, which comprise the consolidated balance sheets as of December 31,20X1 and 20X0, and 
the related consolidated statements of Income, changes in stockholders'equity and cash flows for the 
years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management Is responsible for the preparation and fair presentation of these consolidated financial 
statements in.accordance with accounting principles generally accepted in the United States of 
America; this Includes the design, implementation, and maintenance of interna! control relevant to 
the preparation and fair presentation of consolidated financial statements that are free from material 
misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on our 
audits. We conducted our audits In accordance with auditing standards generally accepted in the 
United States of America. Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether the consolidated financial statements are free from material 
misstatement 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether owing to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the consolidated financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinion. ' 

Opinion 

In our opinion, the consolidated financial statements referred to above present fairly, in all materia! 
respects, the financial position of ABC Company and its subsidiaries as of December 31,20X1 and 
20X0, and the results of their operations and their cash flows for the years then ended in accordance 
with accounting principles generally accepted In the United States of America. 

[Auditor's signature—Firm name, signed by audit engagement partner] 

[Auditor's ci^ and state— -This is a new requirement under the Clarified Standards] 

[Date of the auditor's report—When the auditor has obtained sufficient appropriate audit evidence as 
a reasonable basis for the opinion] 
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Assessing Risk and Developing a Planned Response 



[Introductory Pamgraph] 

1. We have audited the accompanying consolidated financial statements of ABC Company and its 
subsidiaries, which comprise the consolidated balance sheets as of December 31,20X1 and 20X0^ 
and the related consolidated statements of income, changes in stockholders'equity and cash 
flows for the years then ended, and the related notes to the financial statements. 


Management's Responsibility for the Financial Statements 

1. Management is responsible for the preparation and fair presentation of these consolidated 
financial statements in accordance with accounting principles generally accepted in the United 
States of America; this includes the design, Implementation, and maintenance of Internal control 
relevant to the preparation and fair presentation of consolidated financial statements that are free 
from material misstatement, whether owing to fraud or error. 

Auditor's Responsibility 

[First of three paragraphs] 

1. Our responsibility is to express an opinion on these consolidated financial statements based on 
our audits, 

2. We conducted our audits in accordance with auditing standards generally accepted in the United 
States of America. 

3. Those standards require that we plan and perform the audit to obtain reasonable assurance about 
whether the consolidated financial statements are free from material misstatement 

[Second of three paragraphs] 

1. An audit involves performing procedures to obtain audit ^idence about the amounts and 
disclosures in the consolidated financial statements. 

2. The procedures selected depend on the auditor's judgment, including the assessment of the risks 
of material misstatement of the consolidated financial statements, whether owing to fraud or 
error. 

3. In making those risk assessments, the auditor considers liiterhal control relevant to the entity’s 
preparation and fair presentation of the consolidated financial statements in order to design audit 
procedures that are appropriate in the circumstances, but hot for the purpose of expressing an 
opinion on the effectiveness of the entity's internal control. 

4. Accordingly, we express no such opinion. 


reasonableness of significant accounting estimates made by rnanagement, as well as evaluating 
: ■ the overall presentation of the consolidated financial statements. 

[{Ihird o f three paragraphs] 

1. We believe that the audit evidence we have obtained Is sufficient and appropriate to provide a 
basis for our audit opinion. 

Opifiioii 

T. in our opinion, the consolidated financial.statements referred to above present fairly, in ail 
material respects, the financial position of ABC Company and its subsidiaries as of December 31, 
20X1 and 20X0, and the results of their operations and their cash flows for the years then ended 
accordance with accounting principles generally accepted In the United States of America 
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After studying this ies son^ you should be able to. 

1. Recognize which A PA professional Standards are applicable to engagements to review and/or 
compile financial s tements of a private company and which standards are applicable to other 

attestation engage and 

2. Recognize that "engagement letters' are required for any audit engagemcnti and review or compile 
an entity's financial statements under AlCRA Pro^ssional Standards 


I. AlCPA's Statements on Standards for Accounting and Review Services (SSARSs) —^These are 
applicable when the CPA is associated with the financial statements of a private company, but that 
association is something less than a full-scope audit engagement. 

A. Compilation —This occurs when the CPA is engaged simply to assemble into financial statement 
format the financial records of a private company, without expressing any degree of assurance on 
the reliability of those financial statements. 

B. Review —^This occurs when the CPA is engaged to provide a lower level of assurance (relative to 
that of an audit) on financial statements of a private company by performing limited procedures, 
including reading the financial statements, performing analytical procedures, and making 
appropriate inquiries of client personnel. 

II. AlCPA's Statements on Standards for Attestation Engagements (SSAEs)— These are applicable 
when the CPA provides assurance about written representations or subject matter other than historical 
financial statements (e.g., management may make representations about its superior product 
performance that may be made more reliable by the CPA's independent verification and report). 

III. Responsibilities Vary for Different Types of Engagements 

A. Understanding with the Client —When associated with financial 
statement subject matter, AlCPA Professional Standards require the CPA 
to establish an understanding with the entity involved as to the services 
to be rendered and the parties'respective responsibilities. The CPA must 
document that understanding in a written engagement letter between 
the CPA and the client entity. This should not be surprising, sjnee the 
"public interest" is associated with such financial statement subject 
matter. 

B. Levels of Assurance —^The level of assurance varies with the type of service involved and should 
be clearly addressed in the engagement letter between the CPA and the client entity. 

1. Audit —An audit conveys a high level of assurance about the reliability of the financial 
statements, and is expressed as positive assurance in the form of an 
opinion (recall that the SASs apply to audits of "nonissuers"). 

2. Review—A review conveys a lower {i.e., "moderate") level of 
assurance about financial statements (for a private company under 
the AlCPA's SSARSs). 

3. Compilation—A compilation conveys no assurance about the 
reliability of the financial statements (fora private company under 
the AlCPA's SSARSs). 

IV. Other Attest Engagements—^The CPA may convey either a high or 
moderate level of assurance about nonfinancial statement representations 
under the SSAEs. (The subject matter of the engagement Involves 
something other than historical financial statements, and, hence, more 
flexibility exists to negotiate with the entity about the level of assurance to 
be conveyed and/or the procedures to be used as a basis for conclusions.) 


Note 

TheSSARSsahdSSAEswUI 
be e)(plored in detail at an : 
dppfopriate point /o ter in 
the cckirse materials. They 
aremerelyintrddacedhere 
so that candidates will be 
remihded early on that 
■djeAlCPAPro^ssional 
Standards encornpass 
((variety of types of 
istahdards governing 
different services , . 
Associated With the 
’professioi}. 


Note ' '' 

A written engagement 
letter must beobtained 
for engagements to : 
audit Kview, or compile 
an entit/s Unancial 
statements under AlCPA 
Professional Standards. 
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PCAOB Resi 


The Sarbanes-Oxiey Act of was Jiacted by Congre^ 

financiai reporting frauds and a^J&lure^at undermined i|^“ 
markets. Said to be the most sii^ppant re^|lon of securities U 
regulation of the accounting pj^psipn aiiWcreatedthe Publi^ 

(PCAOB), a private-sector not-fo^proflt corporation, to provid^ 
auditors of public companies, oth^hings. 

After studying this lesson, yoifidiouid able to: 

^^Hlyresponsibilitres of the Public Comp| 
^^M:J?e,5arbanes-Oxl^ Act of 2002. 

' fed' ' ' 

2 . Understa^^^rlmafy ("Titl^ of the Sarba^^^^^^^ 

N auditors companies 


)nse to a series of highly visible 
jonfidence in the U.S. capital 
! the 1930s, SOA ended self- 
iy AbcbUhtihg Oversight Board 
jguiatory mechanism over; V 


jhtBbardthat 


Idirectly affect 


1. The Sarbanes-Oxley Act of 2002 and the PCAOB 

A. Public Company Accounting Oversight Board (PCAOB)— Five primary responsibilities: 

1. Registration of public accounting firms— U.S. and non-U.S. accounting firms that prepare 
audit reports of any U.S. public company {issuer of securities) must register with the PCAOB. 
(This includes non-U.S. accounting firms that play a substantial role in the preparation of such 
audit reports.) 

2. Inspections of registered public accounting firms— PCAOB is directed to conduct a 
continuous program of Inspections that assess compliance with SOA, PCAOB rules, SEC rules, 
and applicable professional standards. (A written report is required for each such inspection.) 

a. Firms that provide audit reports for at least 100 issuers— PCAOB must inspect annually. 

b. Firms that provide audit reports for fewer than 100 issuers— PCAOB must inspect 
every three years (triennially). 

3. Standard setting— PCAOB is directed to establish auditing and related attestation, quality 
control, ethics and independence standards and rules to be used by registered public 
accounting firms in the preparation of audit reports for issuers. (The Office of the Chief 
Auditor and the Standing Advisory Group (SAG) assist PCAOB in establishing such auditing 
and professional practice standards.) 

4. Enforcement— PCAOB has broad authority to investigate registered public accounting firms 
and persons associated with such firms. 

a. PCAOB rules require cooperation by registered public accounting firms and associated 
persons—must produce documents and provide testimony as directed. (PCAOB may also 
seek information from others, including clients of registered firms.) 

b. PCAOB sanctions may range from revocation of a firm's registration or barring a person 
from participating in audits of public companies to lesser sanctions such as monetary 
penalties or imposition of remedial measures. Including additional training or new quality 
control procedures. 

5. Funding—PCAOB's budget Is funded by (1) registration and annual fees from public 
accounting firms and (2) an annual accounting support fee assessed on issuers (based on 
their relative monthly market capitalization). 

I!. Overview of the Sarbanes-Oxley Act of 2002 

A. Purpose of the Legislation—To address a series of perceived corporate misconduct and alleged 
audit failures (including Enron, Tyco, and WorldCom, among others) and to strengthen investor 
confidence in the integrity of the U.S. capital markets. 




PCAOB Responsibilities 


B. The Sarbanes-Oxley Act of 2002 consists of 11 Titles (the first four of which are directly applicable 
to auditors). 

C. Title I —Established the PCAOB, gave standard-setting authority to the PCAOB (regarding 
auditing, quality control, and independence standards), and created its role in overseeing the 
accounting firms required to register with the PCAOB. 

D. Title II —Established independence requirements for external auditors, which addressed 
perceived conflicts of interest (limiting non-audit services, establishing a five-year rotation for 
the audit partner and review partner, and restricting members of the audit firm from taking key 
management positions (including CEO, CFO, controller, or chief accounting officer) during the 
one-year period preceding the audit engagement). 

1. Services that the auditor is prohibited from providing: (1) bookkeeping or other 
services related to the accounting records; (2) financial information systems design and 
implementation; (3) appraisal or valuation services; (4) actuarial services; (5) internal audit 
outsourcing services; (6) management functions or human resources; (7) broker or dealer, 
investment advisor, or investment banking services; (8) legal services and expert services 
unrelated to the audit; and (9) any other service that the PCAOB determines is impermissible. 

2. The issuer's audit committee is required to approve any non-audit services (including tax 
services) that are not specifically prohibited. 

E. Title III —Established requirements related to corporate responsibility to make executives take 
responsibility for the accuracy of financial reporting (including a requirement for certification by 
the entity's principal officers) and to make it illegal for management to improperly influence the 
conduct of an audit. 

F. Title IV —Addressed a variety of enhanced financial disclosures, the most well-known of which 
deals with required internal control reporting (Section 404), among other matters. 
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PCAOB on 



After studying this lesson, you should be able to 

1. Understand th( mdltors responsibilitit t i m engagement quality review'^andfc > 

approval of issi nce)undef PCAOB A'ldm |SI ndards ^ ^ - ^ 

2. Know the prim ry differences between ih < cjnirementsotPCAOB Auditing Standards and the 

AtCPA's Statei i its-on Quality Control i rl rds(SQCS) 



I. Engagement Quality Review 
il. Introduction and Overview 

A. Applicability of Standard —Requires an engagement quality review (and concurring approval of 
issuance) for engagements conducted under PCAOB standards (1) for an audit; (2) for a review of 
interim financial information; and (3) for an attestation engagement regarding compliance reports 
of brokers and dealers (or a review engagement regarding exemption reports of brokers and 
dealers). 

B. Objective of the Engagement Quality Reviewer —^To perform an evaluation of the significant 
judgments made by the engagement team and the related conclusions reached and in preparing 
any engagement report(s). 

C. Qualifications of an Engagement Quality Reviewer —(1) Must be an 
associated person of a registered public accounting firm; and (2) must 
have competence, independence, integrity, and objectivity; 

1. Associated person of a registered public accounting firm— 

Should be able to withstand any pressure from the engagement 
partner or others and may be someone from outside the firm; if the 
reviewer is from within the firm, he/she should be a partner or have 
an equivalent position. (There is no such requirement for a reviewer 
from outside the firm.) 

2. Competence— Must be qualified to serve as the engagement 
partner on the engagement under review. 

3. Objectivity— The engagement quality reviewer (and any assisting 
personnel) should not make engagement team decisions or assume any responsibilities of the 
engagement team. 

4. "Cooling-off" restriction —^The person serving as engagement partner during either of 
the two audits preceding the audit subject to engagement quality review is not permitted 
to serve as engagement quality reviewer (unless the registered firm qualifies for a specific 
exemption to this requirement). 

Hi. Engagement Quality Review for an Audit or a Review under PCAOB Standards 

A. Engagement Quality Review Process —^To evaluate the significant judgments and conclusions 
of the engagement team, the engagement quality reviewer should (1) hold discussions 

with the engagement partner and other members of the engagement team; and (2) review 
documentation. 

B. Evaluation of Engagement Documentation —The engagement quality reviewer should 
evaluate whether the documentation that was reviewed (1) Indicates that the engagement team 
responded appropriately to significant risks; and (2) supports the conclusions reached by the 
engagement team. 


Note 

"An outside reviewer who 
is not already associated 
with a registered public 
accounting firm would 
become associated With 
the firm issuing the report 
ifheorshe..,{1)Kceives : 
compensation from the 
, firm Issuing therepprt^i , , 
performing the review or ■ 
(2) performs the review as : 
agent for the firm issuing 
thereport" 



'r 
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PCAOB on Engagement Quality Rewew 


C. Concurring Approval of issuance 

1. The engagement quality reviewer cannot express such approval if there is any significant 
engagement deficiency [when (a) the engagement team failed to obtain sufficient 
appropriate evidence; (b) the engagement team reached an inappropriate overall conclusion; 
(c) the engagement report Is not appropriate; or (d) the firm is not independent of its client]. 

2. The firm cannot give permission to the client to use the engagement report until the 
engagement quality reviewer provides concurring approval of issuance. 

iV. Documentation of an Engagement Quality Review 

A. Documentation should contain sufficient information to permit an experienced auditor, having no 
prior association with the engagement, to understand the procedures performed and conclusions 
reached by the engagement quality reviewer. 

B. Documentation of an engagement quality review should be included in the engagement 
documentation (and be subject to other PCAOB requirements regarding retention of and changes 
to audit documentation). 

V. PCAOB Standards Have Several Differences Relative to AlCPA's Statements on Quality Control 
Standards (SQCS) 

A. Engagement Quality Review —SQCS do not require an engagement quality review for any type 
of engagement, whereas the PCAOB establishes such a requirement. 

B. Cooling-off Restriction—SOCS do not Impose a "cooling-off" restriction or a requirement that the 
reviewer must be an associated person of a registered public accounting firm. 

C. Concurring Approval of Issuance —SQCS require any engagement quality review performed be 
completed before the engagement report is released without requiring a concurring approval of 
issuance. 

D. Documentation Retention and Changes —SQCS do not specifically require that engagement 
quality review documentation must be retained with other engagement documentation and be 
subject to specific policies regarding retention and changes. 
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Pre-Engagement Planning Issues 


After Studying this lesson, you should be able to 

1, Understand the udltorls requin n i > inder tl ipplicahle Statements on Quality Gontioi Stands' 
astheyareusediospecificallycoi ' the'ac ptance and continuance of clients and engagenv n 

2, Understand the iiuditor'srespcn I II esinac cing upon the terms of theaudlt engagement v 

management. 

3, Understanr he. uditors responsibilities’ > communicate with iheprediti^'. oi auditor when ai 

• entity change^udltors. J 


I. Statements on Quality Control Standards— Recall the AlCPA's Statements on Quality Control 

Standards (SQCS) that are applicable to a CPA's financial statement related services. 

A. One of the six elements of a quality control system is acceptance and continuance of clients and 
engagements. Auditors should avoid clients whose management lacks integrity or clients who are 
viewed as too risky owing to industry considerations or entity-specific issues. 

B. The auditor should also evaluate the compliance with applicable ethics requirements, especially 
regarding independence issues and competencies to properly perform the engagement, before 
proceeding with other significant audit-related activities. 



Question 

What if the successor believes that the financial statements covered by the predecessor's 
report require revision? 


Answer: 

Try to arrange a meeting with the three parties (i.e., the successor, predecessor, and client management). 
If the client refuses to meet to discuss issues reflecting on the appropriateness of the previously issued 
financial statements, the successor should consider the risks of being the entity's auditor. 



Question 

What if the auditor is unable to observe the beginning inventory? 


Answer: 

If unable to verify the beginning inventory, the auditor may be unable to reach a conclusion about 
the cost of goods sold and, hence, the net income. As a result, the auditor may not be able to express 
an opinion on the fairness of the income statement, statement of cash flows, or statement of retained 
earnings. However, the auditor could still express an opinion on the balance sheet itself. 


I. Terms of Engagement—The relevant AlCPA guidance Is provided by AU 210, Terms of Engagement. 
This pronouncement addresses the auditor's responsibilities In agreeing upon the terms of the audit 
engagement with management {and those charged with governance, when appropriate). 

A. Auditor's Objective under AU 210— The auditor's objective is to accept an audit engagement 
involving a new or existing audit client only when the basis for the audit has been agreed upon by 
(1) establishing when the preconditions for an audit are present; and (2) confirming that a common 
understanding of the terms of the engagement exists between the auditor and management (and 
those charged with governance, as applicable). 
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Definition 

;Prjecori(|/f/pn5fofafl/Auc//f:Theusebyrnanagementofanacceptablefinanaai reporting fraEnewbrk: 
tn%e preparation of the finandal statements and the agreement of hianagement to. the prerhis^^ 

wjhiehan^uditisbdnducted^ 


1. Management should acknowledge Itsresponsibility for (a) the fair presentation of the 
financial statements; (b) the design and implementation of effective internal control over 
financial reporting; and (c) providing the auditor with ail information relevant to the financial 
statements and any additional Information requested by the auditor, and providing access 
to all entity personnel relevantto the audit of the financial statements. (The auditor should 
determine whether the financial reporting framework is appropriate and obtain an agreement 
that management acknowledges and understands its responsibilities.) 

2. If the preconditions are not present, the auditor should not accept the engagement; instead, 
the auditor should discuss the matter with management. 

3. If management imposes a limitation on the scope of the audit that the auditor believes would 
result in a disclaimer of opinion (called a limited engagement), the auditor normally should 
not accept the engagement. If such an entity is required by law or regulation to have an audit, 
the auditor is then allowed to accept the limited engagement, so as long as a disclaimer of 
opinion is acceptable under the applicable law or regulation. 

4. Agreement on audit engagement terms— The agreement of the terms of the engagement 
should be documented in an audit engagement letter and address the following: 

a. The objective and scope of the audit; 

b. The auditor's responsibilities; 

c. Management's responsibilities; 

d. A statement about the inherent limitations of an audit; 

e. A statement identifying the applicable financial reporting framework; 

f. Reference to the expected content of any reports to be issued; and 

g. Other matters as warranted in the auditor's Judgment. 

B. Initial audits— Initial audit refers to when the prior year's financial statements have been audited 
by a different auditor (referred to as the predecessor auditor).. - 

1. Before accepting the engagement, the auditor should request that management authorize 
the predecessor auditor to respond to the auditor's inquiries relevant to the decision whether 
to accept the engagement. 

2. The predecessor is expected to respond fully and to Indicate when the response is limited. 

The auditor should evaluate the predecessor's response in deciding whether to accept the 
engagement. If management does not authorize the predecessor to respond (or otherwise 
limits the predecessor's response), the auditor should consider that fact in deciding whether 
to accept the engagement. 

3. The auditor's communication with the predecessor auditor may be written or verbal. Typical 
matters expected to be addressed include the following: 

a. Information that might bear on the Integrity of management 

b. Any disagreements with management about accounting or auditing issues 

c. Communications involving those charged with governance with respect to fraud and/or 
noncompliance with applicable laws or regulations 

d. Communications involving management and those charged with governance regarding 
significant deficiencies in internal control 

e. The predecessor's understanding about the reasons for the entity's change in auditors 
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Question 

What If the auditor believes that the financial statements covered by the predecessor's 
report require revision? 


Answer: 

Try to arrange a three-way meeting involving the auditor, predecessor, and entity management. If 
management refuses to meet to discuss issues related to the appropriateness of previously issued 
financial statements, the auditor should consider those matters in deciding whether to accept the 
engagement. 


C. Recurring Audit Engagements—If the auditor concludes that the terms of the preceding 

engagement are still applicable to the current engagement, the auditor should remind 

management of the terms of the engagement (and document that reminder). 

1. The auditor may remind management of the terms of the engagement in writing or verbally. 
When the communication is oral, it is desirable to document the significant matters discussed 
(including with whom and when). 

2. It may be appropriate to revise the terms of the previous engagement. This is the case, for 
example, when there is a change in senior management or a significant change in ownership; 
when there is a change in the financial reporting framework adopted; when there is a 
change in legal or regulatory requirements; when there is any indication that management 
misunderstands the nature of the audit; or when there are special terms to the engagement, 

D. Acceptance of a Change in the Terms of the Audit Engagement 

1. if the auditor is asked to change the audit engagement to an engagement resulting in a lower 
level of assurance (prior to completing the audit engagement), the auditor should determine 
whether reasonable justification for doing so exists; if not, the auditor should decline the 
request. 

2. Suppose that the auditor concludes no reasonable justification for such a change exists, but 
management wilt not permit the auditor to continue the original audit engagement. The 
auditor should: (a) withdraw from the audit engagement when possible; (b) communicate 
the circumstances to those charged with governance; and (c) determine whether there is any 
legal or other obligation to report the matter to any other parties. 

3. Reasonable basis for a change— Reasonable justification would exist when there is a change 
in circumstances affecting management's requirements, or if there was a misunderstanding 
about the nature of the service originally requested. The resulting report should not refer 

to any audit procedures performed prior to changing the engagement to a review or other 
service. 


Mi. Sample Engagement Letter 


CPA Firm's Letterhead ^ • 

N Micy Pritchett I h»engagement letter should be addre«sed to whoever engaged the CPA firm 
-i.ii might be the uitity's CFO, board of duectors. or someone else! The client representative 

I ^ ii'>ible for thee' ]agem< ni who signs the engagement letiei should be given a copy of 

M inedengagenii )ttette> md the CPA firm should retain the original letter for engagement 
I iinu ntation pur) I >es 

.I'rnpany Assun e that ABC Company Is a 'nonissuer" (i e, a private company) such that PCAOB 

II q standard^ <n not apply Hem (-, there is no numtion hore of PCAOB auditing standards or the 
Hot interndUorMolthrtti> i)i|«li(cilili toSt( rngistiant*. under the Sdrbarn*s-Oxley Act of 2002 
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1803 King Avenue 
Gollirnbus, OH 43212 


OfiarJyis.Pjtitchetb^^^ ' ' 

This letter confirms our understanding of the services we will provide to ABC Company for the fiscal 
year ended December 31,20XX. Moreover, this letter constitutes the entire agreement between us 
regarding the services covered by this letter, and It supersedes any prior proposals, correspondence, 
and uhderstahdihgs, whether written or oral. 

Services and Related Report 

We will audit the balance sheet of ABC Company as of December 21,20XX, and the related statements 
: of income, retained earnings, and cash flows for the year then ended, for the purpose of expressing an 
opinion on them. Upon completion of our audit, we will provide you with our audit report on those 
financial statements. 

I 

Our Responsibilities and Limitations 

Our responsibility is to express an opinion on the financial statements based on our audit, and Is ^ 

limited to the period covered by our audit. If circumstances preclude us from Issuing an unqualified 
opinion, we will discuss the reasons with you in advance. If, for any reason, we are unable to complete i 
the audit or are unable to form an opinion, we may decline to express an opinion or decline to issue a : 
report for the engagement. ! 

We are responsible for conducting the audit In accordance with generally accepted auditing | 

standards. Those standards require that we obtain reasonable, but not absolute, assurance about 
whether the financial statements are free of errors or fraud that would have a material effect on the 
financial statements, as well as other illegal acts having a direct and material effect on the financial 
statements. Accordingly, a material misstatement may remain undetected. An audit is not designed to 
detect errors, fraud, or the effects of illegal acts that might be immaterial to the financial statements. 

We will inform you of all matters of fraud that come to our attention. We will also inform you of any 
illegal acts that come to our attention, unless they are clearly inconsequential. 

We will obtain an understanding of internal control over financial reporting sufficient to properly 
plan the audit and to determine the nature, timing, and extent of audit procedures to be performed. 

The audit will not be designed to provide assurance on internal control over financial reporting or 
to detect significant deficiencies in internal control. However, we will report to you any significant 
deficiencies in internal control that we identify. , 

An audit includes examining, on a test basis, evidence supporting the amounts and disclosures in 
the financial statements. Judgment is required in determining the areas and number of transactions 
selected for our testing. An audit also includes assessing the accounting principles used and significant 
estimates made by management, as well as evaluating the overall financial statement presentation. 

Our procedures will include appropriate tests of documentary evidence supporting the transactions 
recorded in the accounts, tests of the physical existence of inventory, and direct confirmation of 
accounts receivable and certain other assets and liabilities by correspondence with selected customers, 
banks, legal counsel, and creditors. At the conclusion of our audit, we will request certain written 
representations from senior management about the financial statements and related matters. 

Management's Responsibilities - 

The financial statements are the responsibility of the Company's management. That responsibility 
includes properly recording transactions in the accounting records and establishing and maintaining 
internal control sufficient to permit the preparation of financial statements in conformity with 
generally accepted accounting principles. 
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w for adjusting the financial statements to correct any 

raaterial misstaternents and for affirming to us in the representation letter that the effects of any 
uhcorrected misstatements aggregated by us during the engagement and pertaining to the latest 
pefiod presented are immaterial, both individually and In the aggregate, to the financial statements 
taken as a whole. Management is also responsible for ensuring that the Company complies with all 
applicable laws and regulations. 

The Company's management is also responsible for making available to us, on a timely basis, all of 
the Company's original accounting records and related information, documentation, and company 
personnel to whom we may direct our inquiries. That includes providing access to us to the minutes 
of all meetings of stockholders, the board of directors, and committees of the board of directors for 
which such minutes are taken. 

Timing. Fees, and Other Matters 

Assistance to be supplied by the Company's personnel, including the preparation of certain specific 
schedules and analyses of accounts, Is described in a separate attachmentTimely completion of this 
work is necessary for us to complete pur audit on a timely basis. 

The results of our audit tests, the responses to our Inquiries, and the written representation furnished 
by management, comprise the evidence that we will reply upon in forming our opinion on the 
financial statements. The resulting audit documentation for this engagement Is the property of {name 
of the CPA firm) and access will be limited to authorized persons to protect the confidentiality of 
company-specific information. 

As part of our engagement for the year ending December 31,20XX, we will review the federal and 
state income tax returns for ABC Company. We will be available during the year to consult with you on 
the tax effects of any proposed transactions or anticipated changes in your business activities. 

Our fees will be billed as work progresses and are based on the amount of time required plus out- 
of-pocket expenses incurred by our audit team. Individual hourly rates vary according to the degree 
of responsibility involved and the experience and skill required. We will notify you on a timely basis 
of any circumstances we encounter that might affect our Initial estimate of total fees, which we 
anticipate will range from $xx,xxx to $xx,xxx, excluding the aforementioned out-of-pocket expenses. 
Invoices are payable upon presentation. 

If this letter accurately reflects your understanding, please sign^where Indicated in the space provided 
below and return it to us. We appreciate the opportunity to serve you and look forward to a mutually 
enjoyable association. 

Sincerely yours, 

(Marne of the CPA Firm} 


Engagement Partner's Signature 
Accepted and agreed to: 


(ABC Company Representative's Signature) 

(Title) : : 

(Date) 
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you 




be able to: 


1. Understand the auditor's resp^ibiiity to adequately plan engagement based on 

applicable AlCPA Professional^ndards. 


Recall the AlCPA's specific Performance Principle dealing with "planmn|, materiality, risk | 

assessment,and evidence,"which states:"To obtain reasonable assuran|e, which is a high, bij: not 
absolute, level ofassurance, the auditor: plans the work and properly s|pervises any assistar|s." 


i. AlCPA Guidance—The relevant AlCPA guidance is provided by AU 300, Planning An Audit. This 

pronouncement states that the auditor's objective Is to plan the audit so that it will be performed in an 
effective manner. 

A. Involvement of Key Engagement Team Members —^The engagement partner and other key 
members of the audit team should be Involved In planning activities. 

1. The nature and extent of planning varies with the size and complexity of the entity, the 
audit team's experience with the entity, and changes in circumstances occurring during the 
engagement. Likewise, the extent of supervision and review can vary depending upon the 
size and complexity of the entity, the nature of the audit area involved, the assessed risks of 
material misstatement, and the competence of the audit personnel involved. 

2. Planning is an ongoing iterative process, not a one-time activity. Planning encompasses risk 
assessment procedures, understanding the applicable legal and regulatory framework, the 
determination of materiality, the involvement of specialists, and so forth. 

3. The engagement partner may delegate portions of planning and supervision to other 
personnel, but a discussion about the risk of material misstatement (including fraud risks) 
among key members of the audit team, Including the engagement partner, is required. 

B. Preliminary Engagement Activities— The auditor should address the following matters at the 
beginning of the engagement: 

1. Perform appropriate procedures to address quality control issues related to the continuance 
of the client relationship and the specific audit engagement (including consideration of Issues 
regarding management integrity). 

2. Evaluate compliance with relevant ethical requirements related to quality control 
considerations (particularly regarding Independence issues). 

3. Establish an understanding of the terms of the engagement. 

C. Planning Activities 

1. The auditor should establish an overa//dud/f strategy dealing with the scope and timing of 
the audit work, which affects the development of the required audit plan. (An audit plan is 
more detailed than the overall strategy and deals with the nature, timing, and extent of audit 
procedures to be performed.) In establishing the overall audit strategy, the auditor should; 

a. identify relevant characteristics of the engagement affecting its scope. 

b. Identify the reporting objectives of the engagement and required communications. 

c. Consider the factors that are significant in utilizing the audit team. 

d. Consider the results of preliminary engagement activities. 

e. Determine the nature, timing, and extent of necessary resources for the engagement. 
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f. The overall strategy affects the auditor's decisions regarding the allocation of audit 
resources to specific audit areas and how/ those resources are managed and supervised. 

g. Communication with those charged with governance—^The auditor is required to 
communicate with those charged with governance about an overview of the planned 
scope and timing of the engagement. The auditor may discuss planning issues with 
management, but should be careful to avoid divulging details that might reduce the 
effectiveness of the audit by making the auditor's procedures and scope too predictable. 

2. The auditor should also develop an audit plan. (In practice, the term audit program is often 
used in place of what the AlCPA calls the audit plan.) The audit plan encompasses (a) the 
nature and extent of planned risk assessment procedures; (b) the nature, timing, and extent 
of planned further audit procedures at the relevant assertion level; and (c) other planned audit 
procedures necessary to comply with GAAS. Note; Because planning is an Iterative process, 
the auditor should make appropriate changes to the overall strategy and to the audit plan as 
necessary during the course of the audit If unexpected circumstances are encountered. 

D. Specialized Skills— The auditor should determine whether there is a need for specialized skills on 
the engagement. In the past, the AlCPA used the term specialist to describe what they now call "a 
professional possessing specialized skills." 

1. A professional having specialized skills may be someone within or outside of the audit firm. 
Examples include valuation experts, appraisers, actuaries, tax specialists, IT professionals, 
etcetera. 

2, The auditor should be sufficiently knowledgeable about the matters involved to 
communicate the objectives of the work, to evaluate whether the planned procedures will 
meet the auditor's needs, and to evaluate the results of the procedures performed. 

E. Documentation— The auditor should address the following matters in the audit documentation: 
(1) the overall audit strategy; (2) the audit plan; and (3) any significant changes made to the audit 
strategy or the audit plan during the audit engagement, along with the reasons for any such 
changes. 

II. PCAOB Standards— The relevant PCAOB guidance is provided by their auditing standards on Audit 
Planning.The auditor's pianning-related responsibilities are virtually the same under the PCAOB 
standards as they are under the AlCPA standards. 
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After studying this iosson, you should be able to: f 

1. Understand the coneeptof materiality, whicKjs essential in,evaluating the"fairn6ss"of the firiancia1 
statements within some range of acceptability. ; 

2 . Understand the roleofbothquarititativeand.qualltatjveconsiderationsthatrnlghtinfluencethe 
auditor's judgments about materiality, 

3. Recognize the meaning ofthe term "performance materiaiity." 


I. AlCPA Guidance-—The relevant AlCPA guidance is provided by AU 320, Materiality in Planning and 
Performing An Audit.Th\s pronouncement states that the auditor's objective is to apply the concept of 
materiality appropriately in planning and performing the audit 

ii. Materiality—The concept of materiality can be described as "an understanding of what is important" 
in financial reporting based on theauditor's perception ofthe users'needs. 

A. A definition of materiality from the FASB's Conceptual Framework project (specifically, Statement 
on Financial Accounting Concepts No. 2) follows: 


'The magnitude of an omission or misstatement of accounting information that, in the light of 
surrounding circumstances, makes it probable that the judgment of a reasonable person relying on - 
the infpfrnation would have been changed or Influenced by the omission or misstatement." (Note 
that this definition emphasizes that materiality Judgments involve both quantitative and qualitative . 
cohs;id,efatlons.) 


B, The determination of materiality is a matter of professional judgment, 
and involves both quantitative (the relative magnitude of the 
items in question} and qualitative (the surrounding circumstances) 
considerations. 

C. The auditor considers the concept of materiality throughout the audit 
process, including (a) in planning and performing the audit; (b) in 
evaluating the effect of uncorrected misstatements on the entity's 
financial statements; and (c) in forming the auditor's opinion. 

1. In planning the audit—^The auditor should determine the 
materiality for the financial statements as a whole in connection 
with establishing the overall audit strategy. The auditor should 
determine performance materiality in connection with assessing 
the risks of material misstatement and determining the nature, 
timing, and extent of further audit procedures at the relevant assertion level. 


Definition 

r^P&rBrmimce Moteriality.l'he arnount(s) set by.the auditor at less than materiality for the financial 
staternents as a whole to reduce to an appropriately low level the probability that the aggregate of 
: uncorfected a^ misstatements exceeds materiallty.for the financial statements as a 

it is also the amountfs) set by the auditor at less than the materiality level(s) for 
particular classes of transactions, account balances, or disdosures. 

■ tfo/erabi'e M/sstdfem application of performance materiality to a particular sampling procedure. 


2. Revision during the audit—^The auditor should revise materiality for the financial statements 
as a whole and, if applicable, the materiality level(s) for specific classes of transactions or 


Note 

Previous AlCPA auditing 
standards distinguished . 
between planning- 
stage materiality • 
andevaluation-stage 
materiality-Current 
standards no longer make 
that distinction^ but, 
instead. Introduce the term 
performance materiality, 
which se^mssimiidrto 
what vvdsrn^ntby the 
term planningTsiage' 
materiality in the past. 
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account balances when the auditor becomes aware of information affecting the auditor's 
initial judgments. The auditor should also determine whether "performance materiality" 
should be revised and whether the nature,tlming, and extent of further audit procedures are 
appropriate. 

D. Documentation—The auditor should document the following matters: 

1. Materiality for the financial statements as a whole 

2. Materiality levet(s) for particular classes of transactions, account balances, or disclosures, as 
applicable 

3. Performance materiality 

4. Any revision of those considerations during the audit engagement 

E. Considerations that May Affect the Auditor's Materiality Judgment 

1. Quantitative guidelines— In practice, auditors frequently apply a variety of "benchmarks" 
as a starting point in determining the appropriate materiality levels. A few examples of 
frequently used genera! guidelines follow (these are not specifically identified in the AlCPA 
auditing standards, however): 

a. 5% to 10% of net income or earnings before taxes 

b. 0.50% to 2% of the larger of net sales or total assets 

c. 5% of owners'equity for private companies 

2. Qualitative matters— The surrounding circumstances and perceived risks might affect the 
auditor's judgment of what Is material to the users. There are too many such factors to list 
here, but two examples follow: 

a. Public versus private companies— A lower materiality threshold may apply to public 
companies owing to more exposure to litigation and because the owners of private 
companies may be closer to the day-to-day operations and, therefore, have different 
information needs. 

b. Unstable versus stable industry— A lower materiality threshold may apply to a 
company in an unstable Industry, which is by nature more susceptible to business failure. 

3. Tolerable misstatement (which, in practice, is sometimes referred to as "tolerable error")— 
This term refers to the maximum error in a population that the auditor is willing to accept. 
This should be established in such a way that tolerable misstatement, combined for the entire 
audit plan, does not exceed materiality for the financial statements taken as a whole. 

III. PCAOB Standards— The relevant PCAOB guidance is provided by Consideration of Materiality in 

Planning and Performing an Audit. The auditor's responsibilities regarding materiality under the PCAOB 
standards are very similar to those under AiCPA standards, although the PCAOB standard does not use 
the term "performance materiality." 
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Audit Risk 


^fter Studying ^ils iMffDn/ you should be able to: 
1. Understanc the concept (and (iefit ition) 


relevant to )lanning, fieldwork, tinn audit 



audit approach 


Understanc the components of ih' "audit risk 
major classi *5 of transactions to be audited. 


, ,„ .i.yidual audit areas 6r 


I. Audit Risk 

A. Definition of Audit Risk —"The risk that the auditor expresses an inappropriate audit opinion 
when the financial statements are materially misstated. Audit risk is a function of the risks of 
material misstatement and detection risk." (Source—AU 200, Overall Objectives of the Independent 
Auditor and the Conduct of an Audit in Accordance with [GAAS].) Note that the concept of audit risk 
is really a probability and that audit risk and materiality are interrelated by the definition of audit 
risk. 

B. The presence of audit risk is indicated in the auditor's report by reference to reasonable assurance, 
meaning that audit risk cannot be reduced to a zero probability (which would imply "absolute 
assurance") owing to the inherent limitations of an audit. Reasonable assurance is defined as 
follows: "In the context of an audit of financial statements, a high, but not absolute, level of 
assurance." Note that reasonable assurance means a "high level of assurance" and a "low level of 
audit risk." 

W. Basic Auditor Responsibility —The auditor should properly plan and perform the audit to obtain 
reasonable assurance that material misstatements, whether caused by errors or fraud, are detected. 

iil. Considerations at the Financial Statement Level —The one overriding audit planning objective is to 
limit audit risk to an appropriately low level (as determined by.the auditor's judgment), which involves 
the following: 

A. Determining the extent and nature of the auditor's risk assessment procedures 

B. Identifying and assessing the risk of material misstatement 

C. Determining the nature, timing, and extent of further audit procedures 

D. Evaluating whether the financial statements taken as a whole are presented fairly in conformity 
with GAAP 

IV. Risk of Material Misstatement — The risk of material misstatement {RN\N\) is defined as: "The risk 
that the financial statements are materially misstated prior to the audit." RMM exists at two levels: 

(1) the overall financial statement level; and (2) the assertion level for classes of transactions, account 
balances, and disclosures. 

A. RMM at the Overall Financial Statement Level —This refers to risks that are "pervasive"to the 
financial statements and that potentially affect many assertions. 

B. RMM at the Assertion Level —The auditor assesses RMM at the assertion level for the purpose 
of determining the nature, timing, and extent of further audit procedures to obtain sufficient 
appropriate audit evidence. RMM at the assertion level consists of two components: (1) inherent 
risk; and (2) control risk (see below). 

C. At the assertion level, audit risk consists of three component risks: (1) inherent risk (IR); (2) control 
risk (CR); and detection risk (DR). RMM consists of inherent risk and control risk. 



103 






Assessing Risk and Developing a Planned Response 


Definitions 

Inherent Risk (IR): The probability that a materlai misstatement would occur in the particular audit area 
in the absence of any internalcohtrol policies and procedures. 

Control Risk (CR):The prol»6(J)ly■■th^t a material misstatementi^atocc^red in the first place would 
not be detected and corretij^lw.Internal controls that are applicable.-;. 

.■ - 1 ■■■.;probabititythatanidteriHlrn'.si.iti-riientthatwa>nc.t!v»*-ii--.i..i i i .. j 

and corrected by internal controj’was-not detected by the aur^r-'s^uj^taritive audit procedures (i.e., 
an undetected materiarrhisstatement exists in a relevant assertion), 


V. Variations on the above Audit Risk Model 

A. AR=RMMx DR, where: 

1. "Risk of materia! mlsstatement"{RMM)—the auditor's combined assessment of inherent risk 
and control risk (if IR and CR are not separately assessed). 



B. AR = RMM X TD X AP, where: 

1. DR can be broken into two components involving the likelihood that the auditor's tv\^o basic 
categories of substantive procedures fail to detect a material misstatement that exists (1) 
"tests of details risk" (TD) and (2) "substantive analytical procedures risk (AP)." 


; Note that DR = tD X AP 


C. AR = IRxCRxTDx AP 

VI. Quantification of the Risk Components 

A. The component risks do not necessarily have to be quantified; for example, they could be assessed 
qualitatively as high, medium, or low. 

B. Each component is considered from left to right in order: audit risk is set, then inherent risk is 
assessed, then control risk is assessed, and finally the implications for the appropriate level of 
detection risk are considered. 

C. "Detection risk" is the only component risk that Is specifically the auditor's responsibility— 
"inherent risk" arises because of the particular audit area under investigation and "control risk" 
reflects management's responsibility to design and Implement internal controls. Note that the 
auditor must "assess" inherent risk and control risk, but the auditor actually makes the decisions 
that, in effect, result in some level of detection risk, which should take into consideration the 
auditor's assessment of the risk of material misstatement. 

1. If IR and CR are seen by the auditor as too high, the auditor must compensate by decreasing 
DR. 

2. If IR and CR are perceived as low, the auditor may consider accepting a higher DR. 

D. Increasing or decreasing DR is accomplished by adjusting the nature, timing, and/or extent of 
the auditor's substantive audit procedures. These might be viewed as the auditor's three strategic 
variables that, in effect, "set" DR based on the auditor's professional Judgment about the following: 

1 . Nature—What specific audit procedures to perform {perhaps shifting the relative emphasis 
placed on the "soft evidence" analytical procedures versus the "hard evidence" tests of details)? 
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2. Timing—When will the procedures be performed? At an'Interim" date (prior to year-end) or 
at "final" (after year-end when the books have been closed) and the auditor is actually auditing 
the numbers that the entity Intends to report in Its financial statements)? 

3. Extent—Are large samples required fortheauditor's test work or can somewhat smaller 
sample sizes be justified? How extensively should substantive procedures be performed? 
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After studying this fesson, you should be able to: 

1. State the definition of analytical procedures. 

2. iJi. n lilu-toiir'kf-y'con‘idoiationslhat(j(‘tt*rmmcthccfficioncydndefh:ctivpnessoftht' 
analytical procedures used for substantive purposes. 

3. (Ii 'itify th( ti,.jtt<-r‘ u d Uj .miilytkal procedu I's that jhould be included in the audit 

documentation. •, " • - 


Definition 

' And/yt/cfl/Procedures: Evaluations of financial information through analysis of plausible relationships 
among both financial and nonfinancial data. (This includes any necessary foilQw-up investigation of 
fluctuations, significant differences, or inconsistent relationships.) 


I. AlCPA Guidance— The relevant AlCPA guidance is provided by AU 520, 

Analytical Procedures. This pronouncement states that the auditor's 
objectives are to: (1) obtain relevant and reliable audit evidence when using 
substantive analytical procedures; and (2) design and perform analytical 
procedures near the end of the audit that assist the auditor when forming 
an overall conclusion about whether the financial statements are consistent 
with the auditor's understanding of the entity. 

A. Substantive Analytical Procedures— When performing analytical 
procedures for substantive purposes, the auditor should: (1) determine 
the suitability of the particular analytical procedures for given 
assertions; (2) evaluate the reliability of the data from which the auditor 
developed the expectation; (3) develop an expectation of recorded 
amounts (or ratios) and evaluate whether the expectation Is sufficiently 
precise; and (4) compare the recorded amounts (or ratios) with the auditor's expectations and 
determine whether any difference Is acceptable without further investigation. 

1. Substantive procedures may consist of substantive analytical procedures, tests of details, 
or some combination of both.The auditor makes judgments about the effectiveness and 
efficiency of such procedures to limit the assessed risk of material misstatement to an 
acceptably tow level 

2. Nature of assertion— The effectiveness and efficiency of analytical procedures used for 
substantive purposes depends on four Important considerations: (1) the nature of the 
assertion involved; (2) the plausibility and predictability of the relationship; (3) the availability 
and reliability of the data used as a basis for developing the expectation; and (4) the precision 
of the expectation. Analytical procedures may be particularly effective in testing for omissions 
(regarding the"completeness" assertion) of transactions that would be hard to detect with 
procedures that focus on recorded amounts. In other words, tests of details may not be 
effective when underlying source documents do not exist for transactions that went totally 
unrecorded, so analytical procedures may represent the best chance of detecting such 
omissions. 

3. Plausibility and predictability of relationship— Developing a meaningful"expectation"to 
compare to the entity's recorded amount is critically important to the skillful use of analytical 
procedures. 

a. Relationships in a stable environment are usually more predictable than those in a 
dynamic environment. 


Note 

AU 520 replaces a 
prevJousAICPA auditing 
standard'(then deslgna^d 
%U32n TheAlCPAs 
nonaathoritative 
Summary of Changes, : 

Standards, pointed out, 
“Theclarified-SAS-does.}:- 
not change or expand , 
requirements of extant 
AU section 329 in any .. ' 
significant respect" ^ ^ 
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b. Relationships involving income statement accounts tend to be more predictable than 
those involving balance sheet accounts (since the income statement deals with a period 
of time rather than a single moment in time). 

c. Relationships involving transactions subject to management discretion tend to be less 
predictable. 

4. Availability and reliability of data —Reliability increases when the data used are reliable, 
which is enhanced when the data are (a) obtained from Independent external sources; (b) are 
subject to audit testing (either currently or in the past); or (c) are developed under conditions 
of effective internal control. 

5. Precision of expectation —^The likelihood of detecting a misstatement decreases as the 
level of aggregation of the data increases, in other words, relationships of Interest to the 
auditor may be obscured by the noise In the data at high levels of aggregation. For example, 
analyzing sales by month broken down by product line is more likely to be helpful to the 
auditor than simply comparing the current year's sales in total to the prior year's sales. 

B. Analytical Procedures when Forming Overall Conclusions— The auditor should perform 
analytical procedures near the end of the audit that assist the auditor informing an overall 
conclusion as to whether the financial statements are consistent with the auditor's understanding 
of the entity. These procedures may be similar to those used as "risk assessment procedures," and 
include reading the financial statements and considering any unusual or unexpected relationships 
that were not previously identified. As a result, the auditor may revise the assessment of the risks 
of material misstatement and modify the planned further audit procedures. 

C. Investigating Results of Analytical Procedures —The auditor should investigate any identified 
significant differences by (1) inquiring of management (and corroborating management's 
responses with appropriate audit evidence, as necessary); and (2) performing other necessary 
audit procedures. 

D. Documentation— The auditor should include the following matters in the audit documentation: 

1. The auditor's expectation and the factors considered in developing it; 

2. The results of the comparison of the recorded amounts (or ratios) with the expectations; and 

3. Any additional auditing procedures performed to investigate significant differences identified 
by that comparison. 


in summary, anaiytical prb^li^^erve three audit purposes (two of which am required): 


:1,i For risk assessment: 





. 

2. For substantive purposes (widely used voluntarily, but not technically required) 


3. As a final re*iew (requi^l) 
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Detecting Frai 


After studying this lesson, you should be able to: 


1 . 


2 . 


3. 






Understand (and be ableto state) the auditor^ ftihdarnental ^responsibility to detect and'^^^^P 
communicate matters related to fraud In a financial: statementaUdrt^^^^ 

identify and distinguish between the two types oHraud"that might fee 
statement audit, as discussed in the AlCPA Professibnal$tanda;i:dsC : 






identify the three categories of “risk factors”thatthe auditor is regyifed to consider when assessing 
the risk of material misstatement due to fraud, based on AjCfVV PfOfessiphal Standards.: : 


I. AlCPA Guidance~The relevant AlCPA guidance is provided by AU 240, Consideration of Fraud in a 
Finonciai Statement Auditfh\s pronouncement states that the auditor's objectives are to: (!) identify 
and assess the risks of material misstatement due to fraud; (2) obtain sufficient appropriate audit 
evidence regarding the assessed risks of material misstatement due to fraud, through designing and 
implementing appropriate responses; and (3) respond appropriately to fraud or suspected fraud 
identified during the audit 


Definitions 

Fmud\ An intentional act by one or more individuals among management those charged with • 
governance, employees, or third parties, Involving the use of deception that results in a rnlss.tstement 
in the financial statements. 

FraiidMkFactors: Events or conditions that indicate (a) an incentive or pressure to perpetrate fraud; 
(bXprpvide an opportunity to commit fraud; or (c) indicate attitudes or rationalizations to justify a 
fraudulent action. 


A. There are two different types of misstatements that are relevant to the auditor's consideration of 
fraud: 

1. Fraudulent financial reporting -This type of fraud inyoives misstatements that are intended 
to deceive financial statement users (e.g., the intent is to inflate the entity's stock price). 
Fraudulent financial reporting often involves management override of controls, recording 
fictitious journal entries, concealing facts, and altering underlying records to achieve the 
deception. This scenario is typically associated with a conspiracy involving multiple members 
of senior management to deceive the auditors, as well as financial statement users. 

2. Misappropriation of assets— This type of fraud Involves theft of 
assets causing the financial statements to be.misstated owing to 
false entries intended to conceal the theft Misappropriation of 
assets often involves embezzlement of receipts, stealing physical 
assets or intellectual property, and diverting the entity's assets for 
personal use. This scenario is typically associated with an individual 
bad actor operating individually to perpetrate and conceal the 
theft. 

U. The Auditor's Basie Responsibility Relates to Planning 

A. In general, the auditor is required to design (plan) the audit to provide 
"reasonable assurance" of detecting misstatements that are material to 
the financial statements. In particular, the auditor should specifically 
assess the risk of material misstatement due to fraud (in addition to 
error), and design the audit procedures to be responsive to that risk 


Note 

AlCpAPro^Ssjondl ; ^ 

Standards fo^cus on the :: 
auditor's responsibility 
kirptowdingreasohabh-^^ 
assurance of detecting. ...m 
material misstatements, 
whether due to error dr . yi 
fraud, fhe'disiinction : 
depends upon whether the 
misstaterrient is intentional 
(which is the essence of ; 

fraud) pt not. Intentmay be 
difficult to deterrnine, for 
example, when addressing 
accounting estimates, 
which are subjective by 
nature. 
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assessment. That risk assessment should be performed at both the financial statement level and 
the assertion level. 

B. Specifically, key audit team members must have a "brainstorming" discussion to consider how and 
where the financial statements might be susceptible to material misstatement owing to fraud and 
to emphasize the importance of maintaining professional skepticism. That discussion involving 
key members of the engagement team should consider such matters as the following; 

1. Known internal and external fraud risk factors relevant to the entity 

2. The risk of management override of controls 

3. Indications of"earnings management" 

4. The importance of maintaining professional skepticism throughout the engagement 

5. How the auditor might respond to the risk of material fraud 



Question 

Does failure to detect a material misstatement imply a substandard audit? 


Answer: 

No! An auditor may be unable to detect a material misstatement owing to forgery, collusion, or upper 
management involvement, etc. 


Hi. Inquiry and Analytical Procedures— To obtain information needed to identify the risks of material 
fraud the auditor emphasizes "inquiry" and "analytical procedures." (The auditor's important inquiries 
should be documented in the Management Representations Letter at the end of fieldwork!) 

A. Inquiry —^The auditor should question management personnel about their knowledge of fraud, 
suspected fraud, or allegations of fraud; inquire about specific controls that management has 
implemented to mitigate fraud risks; and inquire about management's communications with 
those charged with governance about fraud-related Issues. The auditor may also choose to 
question others (e.g., audit committee, internal auditors, operating personnel, in-house legal 
counsel, etc.) about fraud-related issues. 

B. Analytical Procedures— The auditor should perform analytical procedures involving revenue 
accounts, in particular. In general, the auditor should consider whether any unexpected results 
associated with analytical procedures might have been intentional. 

C. There is a presumption that improper revenue recognition is a fraud risk. The auditor should 
ordinarily presume that there Is a risk of material misstatement owing to fraud related to revenue 
recognition, and perform appropriate audit procedures (such as analytical procedures). 

IV. Fraud Risk Factors— The auditing standards identify three characteristics generally associated with 
fraud: (1) incentive/pressure; (2) opportunity; and (3) attitude/rationalization. These three categories of 
risk factors are sometimes referred to as the fraud triangle. 

A, Fraudulent Financial Reporting —Example risk factors the auditor should consider: 

1. Incentive/pressure —Reasons that management might be motivated to commit fraudulent 
financial reporting. 

a. Financial stability/profitability —When the entity Is threatened by deteriorating 
economic conditions, for example: operating losses threaten bankruptcy; there are 
recurring negative cash flows from operations; there Is vulnerability to rapid changes due 
to technology or other factors; there are increasing business failures in the industry; or 
the entity reports unusual profitability relative to others in the industry. 

b. Excessive pressure to meet the expectations of outsiders—Senior management may 
face significant pressure to meet external expectations, for example: there are overly 
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optimistic press releases; the entity is only barely able to meet the stock exchange's listing 
requirements; the entity Is having difficulty meeting debt covenants; or the entity must 
obtain additional outside financing to retool production to be competitive. 

2. Opportunities —Circumstances that might give management a way to commit fraudulent 
financial reporting. 

a. Nature of the industry or the entity's operations —For example; significant related- 
party transactions not in the ordinary course of business; ability to dominate suppliers 
or customers in a certain industry sector; unnecessarily complex transactions close 

to year-end raise "substance over form" issues; significant bank accounts or business 
operations in "tax-haven"Jurisdictions with no clear business justification; major financial 
statement elements that involve significant estimates by management that are difficult to 
corroborate. 

b. Ineffective monitoring of management —For example, domination of management by 
a single person or small group without compensating controls or; ineffective oversight by 
those charged with governance. 

c. Complex or unstable organizational structure —For example, organization consists of 
unusual legal entities; high turnover of senior management, counsel, or board members. 

d. Internal controls are deficient —For example, inadequate monitoring of controls; 
high turnover rates In accounting, Internal auditing, and information technology staff; 
ineffective accounting and information systems {There are significant deficiencies that 
rise to the level of material weaknesses.) 

3. Attitudes/rationalizations— Attitudes, behaviors, or justifications of management that 
might be associated with fraudulent financial reporting: 

a. Lack of commitment to establishing and enforcing ethical standards 

b. Previous violations of securities laws (or other regulations) 

c. Excessive focus by management on the entity's stock price 

d. Management's failure to correct reportable conditions 

e. Pattern of justifying inappropriate accounting as immaterial 

f. Management has a strained relationship with the predecessor or current auditor 
B. Misappropriation of Assets— Example risk factors the auditor should consider: 

1. Incentive/pressure— An employee or member of management might be motivated to 
commit the misappropriation for a variety of reasons, such as the following: employees who 
have access to cash (or other assets susceptible to theft), may have personal financial problems, 
or they may have adverse relationships with the entity under audit, (perhaps in response to 
anticipated future layoffs or recent decreases to their benefits or compensation levels). 

2. Opportunities —Circumstances that might give someone a way to commit the 
misappropriation include the following: 

a. When assets are Inherently vulnerable to theft —For example, there are large amounts 
of liquid assets on hand, or Inventory items are small, but valuable. 

b. Inadequate internal control over assets —For example, there is inadequate segregation 
separation of duties, inadequate documentation or reconciliation for assets, or 
inadequate management understanding related to Information technology. 

3. Attitudes/rationalizations —^The individual perpetrating the misappropriation might 
possess attitudes or justifications that might be associated with that rationalize the improper 
behaviors and avoid any feelings of remorse for this misconduct. Generally, the auditor cannot 
normally observe these attitudes, but should consider the implications of such matters when 
they are discovered. The following might be of interest to the auditor: 

a. The employee's behavior indicates dissatisfaction with the entity under audit. 
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b. There are changes in the employee's behavior or lifestyle that are suspicious. 

c. The employee exhibits a disregard for Internal control related to assets by overriding 
existing controls or failing to correct known deficiencies. 

C. Consideration of the Effects of the Risk Factors 

1. The auditor should usejudgment in considering the Individual or collective effects of the risk 
factors and recognize that the effects of these risk factors vary widely. 

2. Specific controls may mitigate the associated risks, and specific control deficiencies may add 
to the risks. 

D. Conditions may be discovered duringfieldworkthat cause the assessment of these risks in the 
planning stage to be modified. Factors that might cause the auditor's concerns to increase include 
the following examples: 

1. There are discrepancies in the accounting records Including inaccuracies or unsupported 
balances. 

2. There is conflicting or missing evidence including missing documents or the absence of 
original documents that should be available (perhaps only photocopies are available). 

3. There is a problematic relationship between the auditor and the entity including restricted 
access of the auditor to records or personnel and undue time pressures imposed by 
management. 

E. Responses to Risk Assessment— In response to this risk assessment related to fraud, the auditor 
may conclude that the planned procedures should be modified or that control risk should be 
reconsidered. The auditor might make some "overall responses" (at the financial statement level, 
such as assigning more experienced staff to the engagement) and make other responses "at the 
assertion level" (by designing audit procedures for which the nature, timing, and extent of those 
procedures are responsive to the assessed risks of fraud). 

1. Overall responses—The auditor may decide to assign more experienced personnel or 
information technology specialists to the engagement. The auditor should incorporate a 
degree of "unpredictability" in audit testing, whether at the financial statement level or the 
assertion level (e.g., visiting some locations for inventory counts on an unannounced basis) or 
selecting some items for testing that are below materiality levels. 

2. Responses at the assertion level— The auditor may decide to increase the emphasis on 
audit procedures that provide a stronger basis for conclusions or to confirm the terms of sales 
transactions, in addition to receivable balances; the auditor may move important audit testing 
to year-end, instead of performing those tests at an Interim date; and/or the auditor may 
increase sample sizes for audit testing. 

3. Addressing management override of controls— The auditor should obtain an 
understanding of the entity's controls over journal entries and inquire about unusual activity. 
Selected journal entries at the end of the period should be examined. The auditor should also 
review accounting estimates for bias, and might perform a “retrospective review" of significant 
accounting estimates in the prior year. The auditor should specifically evaluate any significant 
unusual transactions outside the entity's normal course of business. 

F. Management Override —Auditors should plan procedures specifically to address management 
override of internal control. Management override means that upper management may not be 
affected by controls that are imposed on subordinates throughout the organization. (Therefore, 
management may be able to sidestep those controls without leaving an audit trail for discovery.) 

1. Examine adjusting journal entries —The auditor should be especially attentive to 

nonstandard journal entries (Involving unusual accounts or amounts and those involving 
complex issues or significant uncertainty). Likewise, the auditor should also be especially 
attentive to journal entries near the end of the reporting period (both for the fiscal year and 
any applicable interim reporting periods, such as quarterly reports). 
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Evaluate accounting estimates for bias— The auditor should consider performing a 
"retrospective review," which means evaluating prior years'estimates for reasonableness 
in light of facts occurring after those estimates were made. In other words, did later events 
support or refute the appropriateness of management's estimates in prior periods? That may 
affect the auditor's perception of the reliability of management's estimates in the current 
period. 

Evaluate the business rationale for any unusual transactions— The auditor should look for 
appropriate authorization of any unusual transactions by those charged with governance. 
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After stisciymg this lesson, you should be able to: 

1. Understand the auditor's responsibility to evaluate fraud issues in light of the ov^all results of the 

audit procedures performed. I ^ 

2. Identify the specific fraud issues that the auditor should document. 

3. Understand the auditor's responsibility to communicate the identified fraud issi 

thosecharged with governance, or others. I : i 




to management/ 




I. Evaluation of Audit Test Results —Near the end of the audit, the auditor should evaluate whether 

the results of the auditing procedures affect the auditor's initial assessment of material fraud risk. (The 

analytical procedures related to revenue should be performed through the end of the period.) 

A. When evaluating identified misstatements of the financial statements, the auditor should consider 
whether such misstatements might be indicative of fraud. For example, the auditor might 
consider the organizational level Involved. If a misstatement may be the result of fraud involving 
management, the auditor should reevaluate the assessment of material fraud risk and the 
auditor's response to the assessed risks. 

B. If the misstatement is (or may be) the result of fraud and the effect could be materia! to the 
financial statements (or if the auditor has been unable to evaluate the materiality involved): 

1. Attempt to obtain additional evidence to determine the facts as to the cause and whether the 
financial statements are misstated. Discuss the issues and any further investigation required 
with an appropriate level of management (at least one level above those believed to be 
involved) and with those charged with governance (especially if senior management appears 
to be involved). 

2 . If the auditor encounters circumstances related to fraud that call into question whether 
it is appropriate to continue the audit, the auditor should determine the applicable 
professional and legal responsibilities, and consider whether it is appropriate to withdraw 
from the engagement. If the auditor withdraws, then the matter should be discussed with 
management and those charged with governance. (Circumstances that may call into question 
the auditor's ability to continue the audit Include the following: (a) the entity does not take 
appropriate action regarding fraud; (b) audit evidence suggests that there is a significant 

risk of pervasive fraud; and (c) the auditor has significant Concerns about the competence or 
integrity of management or those charged with governance.) 

IL Required Documentation— The auditor should document the following matters related to the 

consideration of fraud in the financial statement audit: 

A. The discussion among engagement personnel about fraud in planning the audit, including how 
and when the discussion occurred, the team members who participated, and the subject matter 
discussed; 

B. The procedures performed to obtain information necessary to assess the risks of materia! fraud: 

C. Specific risks of material fraud that were identified at the financial statement level and at the 
assertion level, including a description of how the auditor responded to those identified risks 
(including the linkage of audit procedures to the risk assessment); 

D. Reasons supporting the auditor's conclusion if revenue recognition was not identified as a fraud 
risk contrary to the presumption that revenue recognition Is a fraud risk; 

E. The results of procedures performed to further address the risk of management override of 
controls; 
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F. Other conditions and analytical relationships that caused the auditor to perform additional 
auditing procedures; and 

G. The nature of any communication about fraud made to management, those charged with 
governance, regulators, and others. 

III. Required Communications When Fraud Is Detected or Suspected —^The auditor's communication 
of fraud issues with management (or those charged with governance) may be written or oral, but 
should be timely. As indicated above, such communication should be documented in the audit 
documentation. 

A. If the fraud is not material to the financial statements and senior management is not involved in 
the fraud, the appropriate level of management (which is usually considered to be at least one 
level above where the fraud is believed to have occurred) should be notified. Determining the 
appropriate level of management for such communication is a matter of judgment, and Includes 
consideration of the likelihood of collusion within management 

B. if the fraud is material to the financial statements or if senior management is involved in the fraud, 
those charged with governance should be notified. 

C. Other Matters Related to Fraud— The auditor may choose to discuss a variety of other matters 
with those charged with governance, including the following; 

1. Concerns about the adequacy of management's assessment of the entity's controls to prevent 
and detect fraud 

2. Failure by management to respond appropriately to identified fraud or to address identified 
significant deficiencies in internal control 

3. Concerns about the entity's control environment, including the competence or integrity of 
management 

4. Concerns about management's efforts to "manage earnings" 

5. Concerns about the authorization of transactions that do not appear to be within the normal 
course of the entity's business 

D. The auditor should consider whether any identified fraud risk factors may constitute a "significant 
deficiency" (or material weakness) regarding internal control that should be reported to senior 
management and those charged with governance. 

E. Whistleblowing— Informing others (outside) the entity such as regulatory and enforcement 
authorities, is ordinarily prohibited by the auditor's confidentiality requirements, although the 
duty of confidentiality may be overridden by law or regulation (or the requirements of audits for 
governmental entities). Accordingly, it would be appropriate for the auditor to seek legal guidance 
when facing such circumstances. The auditing (and ethical) standards historically have identified 
four basic exceptions to the auditor's confidentiality requirements: 

1. The auditor must respond truthfully to a valid legal subpoena. 

2. The auditor must comply with applicable legal and regulatory requirements (including 
complying with the SEC's 8-K requirements about important matters, such as the entity's 
decision to change auditors). 

3. A predecessor auditor must respond appropriately to the successor auditor's inquiries when 
the former client has given permission for the predecessor auditor to respond to the auditor's 
questions. 

4. The auditor must report fraud to the applicable funding agency under the requirements of 
government auditing standards. 
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I. AlCPA Guidance— The relevant AlCPA guidance Is provided by AU 250, Consideration of Laws 
and Regulations in an Audit of Financial Statements.Thls pronouncement states that the auditor's 
objectives are to: (1) obtain sufficient appropriate audit evidence regarding material amounts and 
disclosures about \aws and regulations generally recognized to have a direct effect on the financial 
statements; (2) perform specified audit procedures that may identify instances of noncompliance with 
other laws and regulations that may have a material effect on the financial statements; and (3) respond 
appropriately to noncompliance (or suspected noncompliance) with laws and regulations identified 
during the audit. 



Definition 

Legal and Regulatoly Framewoit^ 
ngncompliance may result in fir| 
staternents.^.^rf 


I entity is subject 

it may have a niatenal effect 


A. Fundamental Auditor Responsibility— The essence of the auditor's responsibility Is to obtain 
reasonable assurance that the financial statements are free from material misstatement, whether 
caused by fraud or error, considering the applicable legal and regulatory framework. 

1, Inherent limitations —The auditor cannot be expected to detect all noncompliance with all 
laws and regulations, since that is a legal determination and because many laws focus on an 
entity's operations instead of on the financial statements. (Note that the personal misconduct 
of management, those charged with governance, or others is outside the meaning of the term 
noncompliance.) 

2. The SAS distinguishes between two categories of considerations: 

a. Laws and regulations having a direct effect on the amounts and/or disclosures in the 
financial statements—The auditor should obtain sufficient appropriate audit evidence 
regarding material amounts and disclosures. 

b. Other laws and regulations not having a direct effect on the financial statements—^The 
auditor should perform specified audit procedures that may identify noncompliance that 
may have a material effect on the financial statements. The specified audit procedures 
include inquiry of management and those charged with governance about compliance 
issues, inspection of any correspondence with regulatory authorities, reading minutes, 
and so forth. 

B. Auditor's Consideration of Compliance with Laws and Regulations —In obtaining an 
understanding of the entity and its environment, the auditor should obtain an understanding of 

1. The entity's applicable legal and regulatory framework; and 

2. How the entity is complying with that framework. 

C. Audit Procedures when Noncompiiance is Identified or Suspected 

1. If Information suggests possible noncompliance —^The auditor should obtain an 

understanding of the circumstances of the act involved and gather further information to 
evaluate the financial statement effect.The auditor should also evaluate the implications of 
noncompliance to other aspects of the audit engagement, including risk assessment and the 
reliability of written representations. 
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2. If the auditor suspects noncompliance —^The auditor should discuss the matter with 
management (at least one level above those suspected to be involved) and with those 
charged with governance, as appropriate. 

3. if unable to obtain sufficient information as to compliance—The auditor should evaluate 
the effect of the lack of sufficient appropriate audit evidence on the auditor's report (and 
consider the need for obtaining legal advice). 

D. Reporting of Identified or Suspected Noncompliance 

1. Reporting noncompliance to those charged with governance— The auditor should 
communicate with those charged with governance any noncompliance with laws and 
regulations (unless it is dearly inconsequential). When management or those charged with 
governance is involved, the auditor should communicate to the next higher level of authority. 
If no higher level of authority within the entity exists, the auditor should consider obtaining 
legal advice. 

2. Reporting noncompliance in the auditor's report —if a material effect on the financial 
statements has not been appropriately reported, the auditor should modify the opinion 
(expressing either a qualified or adverse opinion). If the auditor has been prevented from 
obtaining sufficient appropriate audit evidence to evaluate the financial statement impact of 
the matter, the auditor should modify the opinion (expressing either a qualified opinion or 
disclaimer of opinion) for a scope limitation. 

3. Reporting noncompliance to regulatory/enforcement authorities— The auditor should 
determine whether there is a responsibility to report the matter to parties outside the entity, 
which may take priority over confidentiality responsibilities.The auditor should consider 
obtaining legal advice about this issue. 

4. Withdrawal— If the entity refuses to accept a modified opinion and if withdrawal is possible 
under applicable law or regulation, the auditor may withdraw from the engagement and 
inform those charged with governance of the reasons in writing. Likewise, if the entity does 
not take the appropriate corrective action regarding noncompliance issues, the auditor may 
withdraw if such action is permitted by applicable law or regulation. 

E. Documentation— The auditor should document the identified or suspected noncompliance and 

the results of the discussion with management, those charged with governance, and others, as 

applicable. Such documentation might include: 

1. Copies of records or documents 

2. Minutes of the discussion with management, those charged with governance, and others 
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After studying this lesson, you should be able to: 

1. U nderstand the distjnetion between the terms saditor^spedalkt and managemenfs specialist as 

used bytheAiCPA. " - ^ 

2. Identify the considerations that would be i%levaht to a^ auditor's sSlertioh of a particuiarlpec^ 

3. Know when it would be appropria^for^eadditor-tbiii^rehce the ln\«i]vement of the auditor's 
specialist in the auditor's report 


I. AiCPA Guidance —^The relevant AICPA guidance is provided by AU620, Using the Workof an Auditor's 
Speciolist.This pronouncement states that the auditor's objectives are to determine: (1) whether to use 
the work of an auditor's specialist; and (2) whetherthe workof the auditor's specialist is adequate for 
the auditor's purposes. 


Definitions % 

Auditor's Specialist) An Individual or organization possessing expertise in a field other than accounting 
or auditing, whose work in that fieldis used by the auditor to assist the auditor in obtaining sufficient 
appropriate audit evidence. : 

Management's Specialist An individual or organization possessing expertise in a field other than - ^" 
accounting or auditing, whose work In that field Is used by the entity to assist the entity in preparing 
the financial statements. 


A. Note that the auditor is still responsible for the expressed opinion, so the auditor's responsibility is 
not reduced by using the work of an auditor's specialist. • 

B. Examples of a "field of expertise other than accounting or auditing" include the following: the 
valuation of complex financial instruments; actuarial calculations of liabilities for employee 
benefits; the valuation of environmental liabilities and cleanup costs; estimation of oil and other 
mineral reserves; and the interpretation of contracts, laws, and regulations; and so forth. 

ii. Basic Requirements of the Auditor with Respect to Using an Auditor's Specialist —Some 

considerations may differ for an/nferno/auditor's specialist (who is affiliated with the auditor's firm ora 
firm that is part of an affiliated network) or an exfernu/auditor's specialist (who is not affiliated with the 
auditor's firm). 

A. Determining the Need— The auditor should determine whether an auditor's specialist is needed 
to obtain sufficient appropriate audit evidence, taking Into consideration the following: 

1. The nature of the matter involved; 

2. The risks of material misstatement involved; 

3. The significance of the matter to the audit; 

4. The auditor's experience with any previous workof the auditor's specialist; and 

5. Whether the auditor's specialist Is subject to the audit firm's quality controls (which would 
apply to an internal specialist, but not to an external one). 

B. Competence, Capabilities, and Objectivity of the Specialist— The auditor should evaluate the 
competence, capabilities, and objectivity of the auditor's specialist for the auditor's purposes. 
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1. The auditor should consider information about the competence, capabilities, and objectivity 
of an auditor's specialist, which might be obtained from the following: 

a. Personal experience with the specialist's previous work 

b. Discussions with the specialist or with other auditors familiar with the specialist 

c. Knowledge of the specialist's credentials or professional/industry affiliations, including 
whether the work Is subject to any particular technical performance standards or industry 
requirements 

d. Any journal articles or books written by the specialist 

2. For an external auditor's specialist, the auditor should inquire about any relationships that 
might threaten the specialist's objectivity.The auditor should consider any threats to the 
specialist's objectivity, along with any safeguards that might reduce such threats to an 
acceptable level. 

C. Obtaining an Understanding of the Field of Expertise —^The auditor should obtain a sufficient 
understanding of the field of expertise of the auditor's specialist so that the auditor can 

1. Determine the nature, scope, and objectives of the work; and 

2. Evaluate the adequacy of that work for the auditor's purposes. This understanding may be 
obtained from having experience with other entities requiring that same field of expertise, 
through specific education in that field, or through discussion with the auditor's specialist. 

D. Agreement with the Auditor's Specialist— The auditor and the auditor's specialist should agree 
(in writing when appropriate) about the following: 

1. The nature, scope, and objectives of the work involved; 

2. Their respective roles and responsibilities; 

3. The nature, timing, and extent of communications between the auditor and the auditor's 
specialist, including any reports to be delivered; and 

4. The requirements for the auditor's specialist to adhere to confidentiality considerations 
applicable to an audit engagement.The agreement between the auditor and the external 
specialist is usually in the form of an engagement letter. 

E. Evaluating the Adequacy of the Work 

1. The auditor should evaluatetheadequacy of the work performed by the auditor's specialist, 
including the following matters; 

a. The relevance and reasonableness of the conclusions; 

b. The relevance and reasonableness of any underlying assumptions and the methods used; 
and 

c. The relevance, completeness, and accuracy of any source data used by the auditor's 
specialist. 

2. The auditor may perform specific procedures to evaluate such work, including: 

a. Making inquiries of the specialist; 

b. Reviewing the specialist's working papers; and 

c. Performing certain corroborative procedures, such as performing analytical procedures, 
examining published data, or confirming some matters with third parties, among other 
possibilities. 

F. If the Work is not Adequate—The auditor and the auditor's specialist should agree on any 
further work to be performed, or the auditor should perform additional audit procedures that are 
appropriate to the circumstances {which could include engaging another auditor's specialist). If 
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the auditor is unable to resolve the matter. It could constitute a scope limitation that would result 
in a modified opinion. 

Reference to the Auditor's Specialist in the Auditor's Report 

1. If the auditor's report contains an unmodified opinion, the auditor should not refer to the work 
of an auditor's specialist. 

2. If the auditor's report contains a modified opinion and the auditor believes that it would help 
readers understand the reason for the modification, the auditor may reference the work of an 
external auditor's specialist. Normally, such a reference would first require the permission of 
the auditor's specialist. The auditor should also point out, in the auditor's report, that such a 
reference does not reduce the auditor's responsibility for the expressed opinion. 


Required Commun 
with Governance 


After studying this lesson, you should be able to: 

1. State the specific matters.that the auditorl? required io communicate "with those charged with 

• - governance" (and be able to define thatterflfi). . ' , 

2. Understand the irnpactthatineffective two-wayconrimunication with those charged with 
governance may have on the audit engagement 


I. AlCPA Guidance— The relevant AlCPA guidance is provided by AU 260, The Auditor's Communication 
with Those Charged with Governance.This pronouncement states that the auditor's objectives are 
to: (1) communicate clearly the auditor's responsibilities related to the audit and an overview of 
the planned scope and timing of the audit and (2) obtain from those charged with governance 
information relevant to the audit. 


Definitions 

Those Charged with Governance: The personis) or organizationfs) with responsibility for overseeing 
thP Strategic direction of the entity and the obligations related to the accountability of the entity 
(encompasses the term "board of directors"or''audit committee" used elsewhere in.thbauditing ' 
standards), 

Monoge/nent: The person(s) with executive responsibility for the conduct of the entity's operations,; 


A. Basic Auditor Responsibility— The auditor should communicate those 
matters that are significant and relevant to the responsibilities of those 
charged with governance in overseeing the financial reporting process, 

B. Benefits—Effective two-way communication with those charged 
with governance is important to having a constructive relationship, 
obtaining information relevant to the audit, and assisting those charged 
with governance in their role of overseeing financial reporting. 

II. Communication with Management— The auditor may choose to discuss some matters with 
management before communicating them with those charged with governance, unless that is 
inappropriate. For example, the auditor would not normally discuss issues involving management's 
competence or integrity. Likewise, the auditor may choose to discuss some matters with the internal 
auditor(s} before communicating the matters with those charged with governance. 

III. Matters Required to Be Communicated with Those Charged with Governance— (Note that the 
auditor may choose to communicate additional matters.) 

A. The Auditor's Responsibilities under GAAS—The auditor should communicate the auditor's 
responsibility for expressing an opinion on the fairness of the financial statements, and point out 
that management is responsible for presenting the financial statements in conformity with the 
applicable financial reporting framework.These responsibilities could be communicated by an 
engagement letter. 

B. The Planned Scope and Timing of the Audit—The auditor should commu nicate an overview of 
the planned scope and timing of the audit engagement. 

C. Significant Findings from the Audit—The auditor should communicate: 

1. The auditor's views about the qualitative aspects of the entity's significant accounting policies 
including the quality (not just the acceptability) of significant accounting practices, estimates, 
and disclosures; 


Note ■ ■ 

The auditoris notrequired 
topartormanyspecSUd ' 
procedaresto identify such.'; 
matter to commtihkq^ ., 
with those charged.with - 1 ; 
governance. 
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2. Significant difficulties encountered during the audit Including significant delays caused by 
management, unreasonable time pressure, unavailability of expected information, etc.; 

3. Disagreements with management over accounting and auditing matters whether or not 
those disagreements were satisfactorily resolved; and 

4. Any other matters that the auditor believes would be important to those charged with 
governance in their oversight of financial reporting. 

5. Uncorrected misstatements —^The auditor should request that uncorrected misstatements 
be corrected and communicate any uncorrected misstatements accumulated by the auditor, 
Including the financial statement effect. 

6. Other matters —The auditor should communicate the following matters; 

a. Material misstatements communicated to management that were corrected; 

b. Any significant findings or issues discussed with management; 

c. Any known instances where management consulted with other accountants about 
accounting or auditing matters; and 

d. The written representations that the auditor requested from management. 

IV. The Communication Process —Clear communication by the auditor facilitates effective two-way 
communication with those charged with governance. Generally, the communication may be oral or 
in writing (effective communication may Include formal presentations, written reports, or informal 
discussions, as determined by the auditor's judgment). 

A. The auditor should communicate the significant findings from the audit in writing when oral 
communication is inadequate in the auditor's judgment. 

B. When a significant matter Is discussed with an Individual member or subset of those charged 
with governance (such as the chair of the audit committee or others), the auditor should evaluate 
whether the matter should be summarized in a subsequent communication to all those charged 
with governance. 

C. Timing of Communications— The auditor should communicate on a timely basis so that those 
charged with governance can take appropriate action. However, that timing may vary depending 
upon the circumstances. 

D. Adequacy of the Communication Process— ^The auditor should evaluate whether the two-way 
communication has been adequate for purposes of the audit. 

1. An inadequate two-way communication may suggest an unsatisfactory control environment, 
which the auditor should consider. 

2. If the two-way communication Is Inadequate, the auditor should consider whether a scope 
limitation may exist and consider the possible effect on the assessment of the risks of material 
misstatement. This might warrant modification of the opinion, or even withdrawal. 

V. Documentation of the Communicatlon~The auditor should document matters communicated 
orally, and (when communicated in writing, the auditor should keep a copy of that communication). 

VI. Other Statements on Auditing Standards— Other statements require that certain specific matters 
should be communicated to those charged with governance regarding: 

A. Illegal Acts—The auditor should communicate any illegal acts that come to the auditor's 
attention. 

B. Going-Concern issues— When substantial doubt about the entity's ability to continue as a going 
concern remains after considering management's strategy, the auditor should communicate (1) 
the nature of the conditions identified; (2) the possible effect on the financial statements and 
disclosures; and (3) the effects on the auditor's report: 

C. Fraud— The auditor should: 

1. Inquire of the audit committee about the risks of fraud and the audit committee's knowledge 
of any fraud or suspected fraud; 
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2. Communicate any fraud discovered involving senior management and any fraud that causes a 
material misstatement (>A/hether or not management is involved); and 

3. Obtain an understanding with those charged with governance regarding communications 
about misappropriations committed by lower-level employees. 

Communicating Interna! Control Matters Identified in an Audit—The auditor should 
communicate to management and those charged with governance any identified significant 
deficiencies in internal control (including material weaknesses). 










PCAO 


After Studying this lesson, you should be able to: - 

i, i^ecognize the matters about which.the-auditor is pbligated.to communicate with the company's 
; audit coi^imittee under PCAOB auditing 

Know the meaning bfthe terms "critical accounting estimate"ahd''critical aceouhting policies and ,, 
practices"asusedbythePCAOB. ::V^^ : \ ■ 

3v l^dw the PCAOB's requ irementsregarding the form and timing of the auditor^ communications 
with a company's audit committee. • ^ ' I 


I. Communications With Audit Committees 

II. introduction 

The PCAOB encourages effective two-way communication between the auditor and the audit 
committee. Specifically, it requires the auditor to communicate with a company's audit committee 
regarding the conduct of an audit and to obtain information from the audit committee relevant to 
the audit. It also requires the auditor to establish an understanding of the terms of the engagement 
with the audit committee and to obtain an engagement letter. Communications are required only 
to the extent that the matters are relevant to the Integrated audit, so there may be fewer matters to 
communicate when auditing a smaller, less complex company. 


Definitions 

Audit Committee: A committee (or equivalent body) established by and among the board of directors 
of'a cbrtipany for the purpose of overseeing the accounting and financial reporting processes of the. 
company and audits of the financial statements ofthe company; ifno such committee exirts with ,, 
respect to the company, the entire board of directors of the company. 

Ciiticai Accounting Estimate: An accounting estimate where (a) the nature of the estimate is material 
diie to the, levels of subjectivity and judgment necessary to account for highly uncertain matters or the 
susceptibility of such matters to change and (b) the impact of the estimate oh financial condition or 
opefadng performance is material. 

Critical Accounting Policies and Practices: A company's accounting policies and practices that are; 
both piost Ifhportaht to the portrayal of the company's financial condition and results, and require 
management's most difficult, subjective, or complex judgments, often as a result of the need to make 
estimates about the effects of matters that are Inherently unceftain. 


ill. Objectives 

The auditor's objectives are to: (1) communicate to the audit committee the auditor's responsibilities 
regarding the audit and establish an understanding of the terms of the audit engagement with 
the audit committee; (2) obtain information from the audit committee relevant to the audit; 

(3) communicate to the audit committee information about the strategy and timing of the audit; and 

(4) provide the audit committee with timely observations about the audit that are significant. 

IV. Appointment and Retention 

A. Significant issues Discussed with Management In Connection with the Auditor's 
Appointment or Retention—The auditor should discuss with the audit committee any 
significant issues that the auditor discussed with management in connection with the auditor's 
appointment/retention. 

B. Establishing an Understanding of the Terms of the Audit. 

1. The auditor should establish an understanding of the terms of the engagement with the audit 
committee, including the following matters: (a) the objective of the audit; (b) the auditor's 
responsibilities; and (c) management's responsibilities. 
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2. The auditor should provide an engagement letter to the audit committee annually. 

V. Obtaining Information and Communicating the Audit Strategy 

A. Obtaining Information Relevant to the Audit~The auditor should inquire of the audit 
committee about matters relevant to the audit, including their knowledge of (possible) violations 
of laws or regulations. 

B. Overall Audit Strategy, Timing of the Audit, and Significant Risks— The auditor should 
communicate an overview of the audit strategy (Including timing of the audit) and discuss any 
significant risks identified during the auditor's risk assessment. The auditor should communicate 
the need for specialized skills or knowledge and plans to use the work of the entity's internal 
auditors or others (including other CPA firms) in the integrated audit. 


A. Accounting Policies and Practices, Estimates, and Significant Unusual Transactions— The 

auditor should communicate the following matters: 0) signiUcant accomtmg policies and 
practices; (2) critical accountmg policies and practices (and the reasons they are considered critical); 
(3) critical accounting estimates (Including a description of management's processes, significant 
assumptions, and significant changes to those processes or assumptions); and (4) significant 
unusual transactions (matters that are outside the normal course of business). If management 
communicates any of those matters, the auditor is not required to communicate them again at the 
same level of detail, 

B. Auditor's Evaluation of the Quality of Financial Reporting— The auditor should communicate 
the following matters: 

1. Qualitative aspects of significant accounting policies and practices (including any indications 
of management bias); 

2. Assessment of critical accounting policies and practices; 

3. Conclusions regarding critical accounting estimates; 

4. Significant unusual transactions (and their business rationale); 

5. The conformity of the financial statement presentation with applicable financial reporting 
framework; 

6. Any new accounting pronouncements affecting financial reporting; and 

7. Alternative accounting treatments discussed with management. 

C. Other Information In Documents Containing Audited Financial Statements— The auditor 
should communicate the auditor's responsibilities for other information presented in documents 
containing the audited financial statements. 

D. Difficult or Contentious Matters— The auditor should communicate any difficult or contentious 
matters for which the auditor consulted outside the engagement team. 

E. Management Consultation with Other Accountants— The auditor should communicate 
views about any known instances where management consulted with other accountants about 
significant accounting or auditing matters. 

F. Going-Concern Issues— The auditor should communicate about the following going-concern 
matters: (1) The conditions or events causing the auditor to have substantial doubt about the 
company's ability to continue for a going concern for a reasonable period of time ; (2) the basis 
for the auditor's conclusion, if the auditor concludes that such substantial doubt is alleviated 
by management's plans; and (3) if the auditor concludes that substantial doubt remains after 
considering management's plans, the effect on the financial statements and the auditor's report. 
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€. Uncorrected and Corrected Misstatements 

1. Uncorrected misstatements—The auditor should provide the audit committee with a 
schedule of uncorrected misstatements that the auditor presented to management, and 
discuss with the audit committee the basis for the determination that the uncorrected 
misstatements were immaterial. 

2. Corrected misstatements—The auditor should communicate those corrected misstatements 
(other than those that are clearly trivial) that were detected by the auditor, and discuss the 
implications of those matters relative to internal control over financial reporting. 

H. Material Written Communications —^The auditor should communicate other material written 
communications between the auditor and management. 

I. Departure from the Auditor's Standard Report —When the auditor expects to modify the 
opinion or include explanatory language to the audit report (or an explanatory paragraph), the 
auditor should communicate the reasons for that. 

J. Disagreements with Management —^The auditor should communicate any disagreements with 
management over significant matters, whether or not satisfactorily resolved. 

K. Difficulties Encountered in Performing the Audit— The auditor should communicate any 
significant difficulties encountered, such as: (1) significant delays or the unavailability of 
personnel; (2) unreasonable time pressures to complete the audit; (3) unreasonable management 
restrictions; and (4) unexpected difficulties in obtaining sufficient appropriate audit evidence. 

L. Other Matters— The auditor should communicate any other matters arising out of the audit that 
are significant to overseeing the company's financial reporting. 

VII. Form and Documentation of Communications—The auditor's communications may be oral or in 
writing, unless otherwise specified. 

VIII. TIming— The auditor should communicate all of these required matters to the audit committee on a 
timely basis and prior to the issuance of the auditor’s report. 
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icepts and Standard; 


After studying this lesson, you should be able to: 

t . Understar i ’ he auditor s responsibility to obtan an under'^tanding of an entity's i ternai control (in 
connecTio vith the second Standard of Fieldwork under GAA5, which is now assc :iated with one 
oftheAiC! / II n p Principles" underlying an audit under GAAS). 

2. Explain three dm miI a y ilm m ludiior might document the understanding of ini lalcdntrdl 


1. Review Phase— The auditor should obtain an Initial understanding of internal controls and document 
that understanding. 

A. The auditor obtains an understanding of internal control and the flow of documents related to 
the entity's transactions primarily through; 

1. Inquiry of appropriate personnel 

2. Observation of client activities 

3. Review of documentation—The auditor reviews relevant documentation, including the 
client's accounting manuals, prior-year's audit documentation (working papers), etc. 

B. The auditor's internal control analysis tends to focus on the entity's major transaction cycles. 

C. Transaction Cycle— Defined to be a group of essentially homogeneous transactions, that is, 
transactions of the same type. 

D. Implication— A specific transaction cycle is the highest level of aggregation about which 
meaningful generalizations of control risk can be made, since control risk is constant within that 
transaction cycle. Each transaction within a specific transaction cycle Is captured, processed, and 
recorded subject to the same set of internal control policies and procedures. 

E. Examples of Typical Transaction Cycles— Typical examples, include the following: 

1. Revenue/receipts 

2. Expenditures/disbursements 

3. Payroll 

4. Financing/investing activities 

5. Inventory, especially if Inventory is manufactured, rather than purchased 

F. Document the Auditor's Understanding— The auditor should document that understanding 
of internal control. The extensiveness of the review and documentation varies with the 
circumstances (e.g., the emphasis on understanding internal controls increases if reliance on 
internal control is planned): 

1. Flow charts of transaction cycles— A graphical depiction of the client's accounting systems 
for major categories of transactions with emphasis on the origination, processing, and 
distribution of important underlying accounting documents. 

a. Advantages—A fairly systematic approach that is unlikely to overlook important 
considerations: tailored to client-specific circumstances; fairiy easy for others to review 
and understand; and fairly easy to update from year to year. 
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b. Disadvantages—Can be rather tedious and time consuming to prepare initially although 
available commercial software today may eliminate much of that difficulty; the auditor 
might fail to recognize relevant internal control deficiencies by getting too absorbed in 
the details of documenting the client's system. 

Assessing Risk and Developing a Planned Response 


Computer operation/process 

Document 

Manual operation (off-line) 

Decision point 
Oft-line storage (e.g., filing) 



2. internal control questionnaires (ICQs) —Questionnaires consisting of a listing of questions 
about client's control procedures and activities; a "no"answer is usually designed to indicate a 
control weakness. 

a. Advantages —Generic questionnaires can be prepared in advance for clients in various 
industry categories with every conceivable question, so that no important question 
related to controls is likely to be omitted; deficiencies are easily identified by a client's "no" 
response to any question. 

b. Disadvantages— Generic questionnaires are not tailored to client-specific circumstances 
and irrelevant questions are annoying to client personnel; the client personnel 
responding to the checklist of questions may conceal deficiencies by inaccurate answers 
without the auditor's knowledge. 

3. Narrative write-ups —A written memo describing the important control-related activities in 
the transaction cycles under consideration. 

a. Advantages —Memos can be tailored to a client's unique circumstances, can be as 
detailed or general as desired, and are relatively.easy to prepare (and easy for reviewers to 
read it). 

b. Disadvantages —It Is relatively easy to overlook relevant internal control issues 
(strengths or weaknesses) because the analysis is fairly unstructured. 

G. Perform a Walkthrough— The auditor may select a few transactions to trace them through the 
client's accounting system. The purpose is merely to get some feedback as to whether the auditor 
has accurately understood (and documented) the way the client entity is processing transactions. 
The walkthrough is not considered evidence ora form of documentation and should not be 
confused with tests of control. 
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Mter studying this lesson, you should be |bl6 to: 

1. Understand the purpose of performing ftests of contn»! ano the circumstances that warrant 

performing such tests. | 

2. Understand the meaning of the term Inlerent limitations in conrwction With internal control. 

3. Understand the impiicatiohS of the ass^sment of control nsk to the lev^^dfit^ion risk that may 
be appropriate (and, thereby, the effecr|)n the "audit plan"—specifically on the nature, timing, and 

extent of the auditor'^^^^^^^^^dures). ^ 


I. Preliminary Evaluation of Internal Control— The auditor may initially consider whether reliance on 
certain specific internal control strengths is appropriate.The auditor may consider assessing control 
risk at less than the maximum level. 

A. Consider the apparent adequacy of controls (regarding design effectiveness) —If internal 
control is perceived to be "ineffective,"the auditor would assess control risk at the maximum level. 

1. Consider the possible types of errors or problems that could occur. 

2. Consider the kinds of procedures that would prevent and/or detect such errors or problems. 

3. Determine whether such controls are in place. 

4. Evaluate the implications of any identified weaknesses. 

B. Consider cost-benefit trade-offs— Reliance on internal controls "buys" a reduction of substantive 
audit work to some degree, but It "costs" additional effort to perform tests of control (and this may 
or may not be cost beneficial, even If the design of internal control is perceived to be effective). 

C. The auditor should document the basis for conclusions about internal control either way, whether 
internal control is perceived to be effective or Ineffective. 

II. Perform Tests of Controls— If reliance is planned (regarding operating effectiveness)—fie//ance 
means the same thing as to assess control risk at less than the maximum level for purposes of accepting 
a somewhat higher level of detection risk. 

A. Perform tests of controls—but only for those specific control policies and procedures (strengths 
that justify accepting a somewhat higher level of detection risk) on which reliance is planned. 

B. The purpose of performing tests of control is to verify that the controls that looked good on paper 
(design effectiveness) were actually working as intended throughout the period (operating 
effectiveness). 

C. Circumstances that warrant performing tests of control (associated with a reliance strategy): (1) 
when the auditor's risk assessment includes an expectation regarding the operating effectiveness 
of controls; or (2) when the performance of substantive procedures alone do not limit audit risk to 
an acceptably low level. 

D. When Performing Tests of Controls—Select a sample of transactions and verify that the control 
procedures of interest were, in fact, performed on the transactions in the sample which usually 
requires that the control procedure be documented as it is performed. Undocumented controls 
may be tested by the auditor's observation of the entity's performance of such controls. 

III. Reevaluate Planned Reliance Based on the Results of These Tests of Controls—Determine 
whether the results of the tests of controls are consistent with the planned reliance on internal 
controls. (What looked good on paper may not be working satisfactorily In reality.) 
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iV, Develop a Detailed Audit Plan—(Also referred to as an audit program) The auditor should prepare 
a written audit plan that specifies the nature, timing, and extent of further audit procedures to be 
performed, and the auditor should document the conclusions about control risk in planning the audit: 

A. A wholly substantive audit approach means no reliance on internal control (which means the same 
thing as assessing control risk at the maximum level). In other words, the auditor plans to meet the 
audit risk objectives by performing only substantive audit procedures without any expectation 
about the operating effectiveness of Internal control. Tests of control would not be performed. 

B. Auditors may base their audit conclusions on both tests of controls and substantive audit 
procedures, although the auditor must always perform substantive procedures to some extent 
(i.e., the auditor cannot rely entirely on the operating effectiveness of internal control as a sole 
basis for conclusions), related to detection risk in the audit risk model. 


Auditor’s Consideration of I/C 



Four Main Phases 


1. Obtain an 
understanding of 
l/C (and document 

it) 

2 . Make a 
preliminary 
evaluation about 
reliance on l/C 
(consider adequacy 
of !/C and cost 
benefit issues) 

3: Pisrform the 
approf»iate tests of 
control if retiance is 
planned 

4. Reevaluate (hat 
refiartce based on 
results of the tests 
of control 



2 . 

Preliminary 
evaluation 
of I/C 


Effective 



3. Perform 
the 

appropriate 
tests of 
control 


Is 

reliance 
on I/C 
cost- 
\ beneficial/ 
efficient 



Disclaim an 
opinion or 
withdraw 
from the 
audi 



Oo not rely 
on t/C (use 
a wholly 
substantive 
audit 

ar^roach) 


Do not rely on 
I/C (use a 
wholly 
substantive 
audit approach) 


4. Reevaluate 
planned 
reliance on I/C 
based on tests 
of control 


Determine 
effect on the 
nature, timing, 
and extent of 
substantive 
audit 

procedures 


Prepare the 
required 
written audit 
program (the 
audit 
strategy) 


V. inherent Limitations—The design and implementation of internal control is a management function 
(not the auditor's responsibility!) and management must evaluate the applicable costs and benefits in 
the design and implementation of their internal control policies and procedures. 

A. The costs of internal controls should not outweigh the benefits attributable to those controls. As a 
result, controls provide reasonable (not absolute) assurance. 

B. Mistakes may occur as a result of employees'misunderstandings, misjudgments, carelessness, 
fatigue, etc. 
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C. Segregation of duties may break down due to collusion (a conspiracy among employees or 
management to circumvent internal controls) or management's "override" of controls—override 
refers to management imposing controls downward on subordinates without intending to be 
affected by those controls themselves. 



Question 

Why must auditors consider an entity's internal control In planning the audit engagement? 


Answer: 

In order to plan an effective and efficient audit, auditors must assess control risk as a basis for setting 
the appropriate level of detection risk related to their substantive auditing procedures (specifically, to 
determine the nature, timing, and extent of those substantive procedures). 
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I. Responsibilities under AlCPA Professional Standards 

A. The relevant AlCPA guidance Is provided by AU 315, Understanding the Entity and Its Environment 
and Assessing the Risks of Material Misstatement This pronouncement states that the auditor's 
objective is to "identify and assess the risks of material misstatement, whether due to fraud or 
error, at the financial statement and relevant assertion levels through understanding the entity 
and its environment, including its Internal control, thereby providing a basis for designing and 
implementing responses to the assessed risks of material misstatement." 


This SAS provides guidance regarding the second Staridard of Fieldwork of (SAAS; "The auditor must : 
obtain a sufficient understanding of the entity and its environment, including Its internal control, to 
assess the risk of material misstatement of the financial statements whether due to fraud or erroiv and • 
to design the nature, timing, and extent of further audit procedures." : i ^ 

That requirement is now embedded in one of the "Performance Principles." "To obtain reasonable 
. assurance, which Is a high, but not absolute, level of assurance, the auditor. . ^identifies and assesses 
risks of material misstatement, whether due to fraud of^fror, based on an understanding of the entity ; 

- and its environment, including the entity's internal control."" 


B. The AU section focuses on the auditor's requirements related to 

1. Risk assessment procedures 

2. Understanding the entity and its environment, including its internal control 

3. Assessing the risks of material misstatement 

4. Documentation 

ii. Risk Assessment Procedures —^The auditor should perform risk assessment procedures to obtain 
an understanding of the entity and its environment, including Its Internal control (the nature, timing, 
and extent of the risk assessment procedures vary with the engagement's circumstances, such as the 
entity's size and complexity and the auditor's experience with It). 

A. inquiries of Management and Others— The auditor should obtain information from inquiries 
made of management and others. Including internal auditors, production and marketing 
personnel, those charged with governance, and outsiders (such as externa! legal counsel or 
valuation experts used by the entity). 

B. Observation and inspection —^The auditor's risk assessment procedures should include 
observation of entity operations, Inspection of documents (e.g., interna! control manuals), reading 
reports prepared by management and those charged with governance (e.g., minutes of meetings), 
and visits to the entity's facilities. 

C. Analytical Procedures—The auditor's analytical procedures performed in planning may assist the 
auditor in understanding the entity and Its environment and identify specific risks relevant to the 
audit. 
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D. Review Information—The auditor should review information about the entity and its 
environment obtained In prior periods. The auditor should consider whether changes may 
have affected the relevance of that information (perhaps by making inquiries or performing a 
walkthrough of transactions through the entity's systems). 

E. Discussion among Audit Team Members— The audit team should discuss the susceptibility of 
the entity's financial statements to material misstatements. 

1. Key members should be involved in the discussion— But professional judgment is required 
to determine who should be included in that discussion. (For a multilocation audit, there may 
be multiple discussions for key members at each major location.) 

2. Objective of this discussion— The purpose of the discussion Is for members of the audit 
team to understand the potential for material misstatements of the financial statements (due 
to error or fraud) in specific areas assigned to them and how their work may affect other parts 
of the audit. 

3. The discussion should include critical issues —Such matters include the areas of significant 
audit risk, the potential for management override of controls; important controls; materiality 
at the financial statement level and the relevant assertion level; etc. 

III. Understanding the Entity and Its Environment— Including its internal control. 

A. The auditor's understanding of the entity and its environment consists of understanding the 
following: (1) industry, regulatory, and other external factors; (2) nature of the entity; (3) objectives 
and strategies and related business risks that may cause material misstatement of the financial 
statements; (4) measurement and review of the entity's financial performance; and (5) internal 
control. 

Industry, regulatory, and other external factors— There may be specific risks of material 
misstatement due to the nature of the business, the degree of regulation, or other economic, 
technical, and competitive Issues. 

Nature of the entity— This refers to the entity's operations, ownership, governance, 
financing, etc. (Understanding these considerations may help the auditor understand the 
classes of transactions, account balances, and disclosures that are relevant to the financial 
statements.) 

Objectives and strategies— The auditor should obtain an understanding of the entity's 
objectives and strategies, Including any related business risks that may cause material 
misstatement of the financial statements. Strategies areoperational approaches by which 
management intends to achieve its objectives. Business risks result from circumstances that 
could adversely affect the entity's ability to achieve its objectives. (Note that the auditor does 
not have a responsibility to identify all business risks.) 

Measurement and review of the entity's financial performance— The auditor should 
obtain an understanding of the entity's performance measures (and their review) and indicate 
aspects of the entity's performance that management considers important, which may help 
the auditor to understand whether such pressures increase the risks of material misstatement. 

Obtain a sufficient understanding of internal control— The auditor should perform 
risk assessment procedures to evaluate the design of controls 
relevant to the audit to Identify types of potential misstatements. 

Note that inquiry alone Is not sufficient to evaluate the design 
and implementation of a control. Consider factors that affect the 
risks of material misstatement; and design the tests of controls, if 
applicable, and the substantive procedures that are appropriate in 
the circumstances. 

B. The Auditor's Consideration of Internal Control— Internal control 
may also be referred to as internal control structure.Jhe auditor should obtain a sufficient 
understanding of internal control to evaluate the design of controls relevant to the audit. 


Note 

The auditor must perform 
substantive tests to some 
degree hr all significant 
audit areas—cannot 
assess control risk so low 
that substantive testing is 
omitted entirely! 


1 . 


2 . 


3. 


4. 


5. 
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Definition 

Internal Control: A process—effected by those charged wHbr^governance, management, and other 
personnel—that is designed to provide reasonable assuranceeboutthe achievement of the entity's 
objectives with regard to reliability of financial-reporting, effectiveness and efficiency of operations, 
and compliance with applicable laws and regulates... - ; : jr .; / j 


C. The Auditor's Primary Consideration —^The auditor should consider whether (and how) a 
specific control prevents, or detects and corrects, material misstatements in relevant assertions 
related to classes of transactions, account balances, or disclosures. 

D. internal control consists of five interrelated components: 

1. Control environment— ^The policies and procedures that determine the overall control 
consciousness of the entity, sometimes called "the tone at the top." 

The auditbr should evaluate the following elements that comprise the entity's control environment: 

Comrnuhication and enforcement of integrity and ethical values 

Commitment to competence \ 

participation of those charged with governance (including their interaction with internal and external 
auditors) : ^ 

Management's philosophy and operating style 

The entity's organizational structure 

TTie entity's assignment of authority and responsibility (including internal reporting relationships) 
Human resource policies and practices 


2. Risk assessment— The policies and procedures Involving the identification, prioritization, 
and analysis of relevant risks as a basis for managing those risks. 


Hie auditor's responsibilities include; 

fhquirihg about business risks that management has identified relevant to financial reporting and 
considering their implications to the financial statements 

Considering how management Identified (and decided how to manage) business risks relevant to ; 
financial reporting ; - 

Considering the Implications to the risk assessment pfocess-when the auditor identifies business risks 
thatmanagement failed to identify 


3. Information and communication systems— The policies and procedures related to the 
identification, capture, and exchange of information in a form and time frame that enable 
people to carry out their responsibilities. 

The auditor's responsibilities include obtaining the following: 

Sufficient knowledge to understand the classes of transactions that are significant to the financial 
statements and the procedures and relevant documents related to financial reporting 

An und%standing of how incorrect processingof transactioiisis resolved 

Ah uriderstanding of the automate^^ (IT) and.manual procedures used to prepare the financial 
statements and hbvv misstatements may occur \ 

An understandirig of how transactions originate wijb the;entl^s business processes 

SufScient knowledge to understand how the entity cbmanurij^lEs finanGlaf reporting roles and 
;responsibilities' ; , , '•' 
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4. Control activities—The policies and procedures that help ensure that management 
directives are carried out, especially those related to 

a. Authorization, 

b. Segregation of duties, 

c. Performance reviews, 

d. Information processing, ond 

e. Physical controls. 

responsibilities include* j 

^ 0^^ understanding tf how IT affects control activities relevant to planning the audit 

" (especially with respect to aj jlir ition controls and general controls), and 

Cpnsi|ering whether th^^^y hd^ jabltshed^efFe^tive^^^^ elated to IT (especially with respect 

5. Monitoring—The policies and procedures involving the ongoing assessment of the quality of 
interna! control effectiveness overtime. 

The auditor should obtain an understanding of the sources of the information related to the entity's ; 

\ monitoring activities and the basis upon which management considers the information to be reliable. 


E. Inherent Limitations of Internal Control— Internal control provides reasonable, not absolute, 
assurance about achieving the entity's objectives. Internal control may be ineffective owing to 
human failures (mistakes and misunderstandings) and controls may be circumvented by collusion 
or management override of controls. The cost of an internal control procedure should not exceed 
the benefit expected to be derived from it. 
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In Response to Assessed Risks 



should be able to: 


misstatement. 


Document various;iilE^ai control matters. 


Link audit responsesti 
relevant-assertion lev? 


\e risks of material misstatement at the! 

s 

accordance with AlCPA Professional SI 


^ndal-statement level and the 
idards. ^ . 


i. Responsibilities under AlCPA Professional Standards 

A. The primary relevant AlCPA guidance Is provided by AU 315, Understanding the Entity and Its 
Environment and Assessing the Risks of Material Misstatement. This pronouncement states that the 
auditor's objective is to "identify and assess the risks of material misstatement, whether due to 
fraud or error, at the financial statement and relevant assertion levels through understanding the 
entity and Its environment, including its Internal control, thereby providing a basis for designing 
and implementing responses to the assessed risks of material misstatement." 

B. Additional relevant guidance is provided by AU 330, Performing Audit Procedures in Response to 
Assessed Risks and Evaluating the Audit Evidence Obtained.The auditor's objective is "to obtain 
sufficient appropriate audit evidence regarding the assessed risks of material misstatement 
through designing and implementing appropriate responses to those risks." 

II. Assessing the Risk of Material Misstatement 

A. Auditor's Responsibility— The auditor should Identify and assess the risks of material 
misstatement 

1. At the financial statement level; and 

2. At the relevant assertion level related to classes of transactions, account balances, and 
disclosures. 

B. Internal Control Considerations —A weak control environment (such as management's lack of 
competence) may have pervasive financial statement effects and require an overall response by 
the auditor. The auditor's understanding of internal control may also raise questions about the 
auditability of the entity's financial statements (e.g., sufficlejit appropriate evidence may not be 
available). 

C. Significant Risks— These are risks that the auditor believes require special audit consideration. 
The auditor should consider the nature of the risks identified (e.g., whether the risk may relate 
to fraud, significant economic developments, the complexity of transactions, related-party 
transactions, subjective measurement, or nonroutine transactions that are unusual for the entity). 

D. Risks for which Substantive Procedures Alone do not Provide Sufficient Appropriate Audit 
Evidence —^The auditor should evaluate the design and implementation of controls over such 
risks, since it is not possible to reduce detection risk to an acceptably low level with substantive 
procedures by themselves: for example, when IT Is a significant part of the entity's information 
system and transactions are initiated, authorized, recorded, processed, and reported electronically 
without an audit trail. 

E. Revision of Risk Assessment—Risk assessment Is an iterative process and the assessment of 
risks may change as additional evidence Is obtained. (For example, when performing tests of 
controls, evidence may be obtained that controls are Ineffective, or when performing substantive 
procedures, misstatements may be detected that suggest that controls are ineffective.) 
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ill. Documentation—The form of the documentation requires professional judgment and varies with 
the circumstances, including the complexity of the entity and the extent to which IT is used. The 
documentation may include narrative descriptions, questionnaires, flowcharts, and checklists. 

A. The auditor should document the following matters: 

1. The discussion with members of the audit team about the potential for misstatements due to 
error or fraud including how and when that discussion occurred, the subject matter discussed, 
the team members involved, and significant decisions reached about the planned responses 
to those risks; 

2. Major elements of the understanding of each of the five components of internal control 
to assess the risk of material misstatement the sources of information used for that 
understanding, and the risk assessment procedures performed; 

3 . The assessment of the risks of material misstatement (both at the financial statement level 
and at the relevant assertion level) and the basis for that assessment; and 

4. The risks identified and the related controls the auditor evaluated. 

B. Another standard (AU 330) focuses on the auditor's requirements related to; 

1. Overall responses to the risks of material misstatement at the financial statement level; 

2. Responses to the risks of material misstatement at the relevant assertion level (in determining 
the nature, timing, and extent of further audit procedures, including tests of the operating 
effectiveness of controls and substantive procedures); 

3 . Evaluating the sufficiency and appropriateness of the audit evidence obtained; and 

4 . Documentation. 

IV. Overall Responses to the Risks of Material Misstatement at the Financial Statement Level 

A. As the risk of material misstatement increases, the auditor may assign more experienced staff to the 
engagement; provide closer supervision; use specialists; use more unpredictable audit procedures; 
and/or make appropriate changes in the nature, timing, or extent of further audit procedures. 

B. The assessment of the risk of material misstatement may influence the auditor's strategy in using 
a substantive approach or a combined approach that uses both tests of controls (regarding the 
operating effectiveness of controls) and substantive procedures. 

V. Responses to the Risks of Material Misstatement at the Relevant Assertion Level— The 
assessment of the risk of material misstatement may affect the auditor's decisions regarding 
the nature, timing, and extent of further audit procedures, including the tests of the operating 
effectiveness of controls and the substantive procedures. 

A. Substantive procedures must be performed to some degree for all relevant assertions related to 
each material class of transactions, account balance, or disclosure (I.e., the auditor cannot rely 
totally on the effectiveness of the entity's internal controls). 

B. Nature—This refers to the purpose of further audit procedures (tests of controls or substantive 
procedures) and their type (inspection, observation, inquiry, confirmation, recalculation, 
reperformance, or analytical procedures). 

C. Timing—This refers to when the further audit procedures are performed (at year-end or before 
year-end, called "interim"); performing substantive procedures at year-end is usually more 
effective with a higher risk of material misstatement. 

D. Extent—This refers to the quantity of an audit procedure to be performed (such as sample size) 
based on the auditor's judgment; computer-assisted audit techniques (CAATs) may be used to 
extensively test electronic transactions/files. 

E. Tests of Controls—To determine the operating effectiveness of controls 

1. The auditor should perform tests of controls when the auditor's risk assessment includes an 
expectation of the operating effectiveness of controls. (Note that this is frequently referred 
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to as "relying" on internal control as a partial basis for the auditor's conclusions, or "assessing 
control risk at less than the maximum levelO 

2. The auditor should also perform tests of control when substantive procedures alone do not 
provide sufficient appropriate evidence at the relevant assertion level. For example, when the 
entity uses IT extensively and no audit trail exists. 

3. Nature of tests of controls —^Tests of control might Include making inquiries of entity 
personnel; inspection of documents, reports, or files, indicating performance of the control; 
observation of the application of the control; and auditor reperformance of the control. Note 
that inquiry alone is not sufficient to test controls. When controls are not documented, the 
auditor may be able to obtain evidence about their operating effectiveness by observation or 
the use of CAATs. 

4. Timing of tests of controls —When obtaining evidence about the 
effectiveness of controls for an interim period, the auditor should 
determine what evidence is required for the remaining period. If 
planning to rely on controls that have changed since last tested, the 
auditor should test those controls currently. If planning to rely on 
controls that have not changed since last tested, the auditor should 
test the operating effectiveness of those controls at least every 
third year (i.e., no more than two years should pass before retesting 
such controls). 

5. Extent of tests of controls—When a control is applied on a transaction basis (e.g., matching 
approved purchase orders to suppliers' invoices) and if the control operates frequently, 

the auditor should use audit sampling techniques to test operating effectiveness; when a 
control is applied on a periodic basis {e.g., monthly reconciliation of the accounts receivable 
subsidiary ledger to the general ledger), the auditor should perform procedures appropriate 
fortesting smaller populations. 

F. Substantive Procedures —^The issues related to the auditor's search for material misstatements 
will be discussed later in connection with lessons on audit evidence. 

VL Evaluating the Sufficiency and Appropriateness of the Audit Evidence Obtained 

A. An audit is an iterative process, so the planned audit procedures may need to be modified; for 
example, identified misstatements from substantive procedures may alter the auditor's judgment 
about the effectiveness of controls. 

B. Consider all relevant audit evidence—^The auditor should consider all relevant audit evidence, 
whether it appears to corroborate or contradict the relevant assertions. 

VII. Documentation —The auditor should document the following: 

A. The overall responses to address the assessed risk of misstatement at the financial statement level; 

B. The nature, timing, and extentof the further audit procedures; 

C. The linkage of those procedures with the assessed risks at the relevant assertion level; 

D. The results of the audit procedures; and 

E. The conclusions reached in the current audit about the operating effectiveness of controls tested 
in a prior audit. 


Note 

WhehiiielaUdi^^^^ 

material mmtatertient, 
but plans to rely oiithe 
effectMness o/confmb 
f/iof 

controls m the current 
period. 
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I. Required Communications Related to Internal Control Deficiencies (Weaknesses) 


Evaluating Control Deficiencies— The auditor must determine whether laenimea aencieiiLies 
are significant deficiencies or material weaknesses. 

should consider both the likelihood and potential magnitude of misstatement in 
multiple control deficiencies affecting the same financial statement 
the likelihood of misstatement, 

consider the possible mitigating effects of compensating controls 


1. The auditor 
making that evaluation 
item increases 

2. The auditor may wish to 
that can reduce the severity of the effects of a deficiency. 

3. Risk factors that affect whether there is a reasonable possibility that a deficiency will result in 

a misstatement include the following: 

a. The nature of the accounts, classes of transactions, disclosures, and assertions involved; 

b. The susceptibility of the related asset or liability to loss or fraud; 
c The subjectivity, complexity, or extent of judgment involved; 

d. The interaction or relationship of the control with other controls; 

e. The interaction among the deficiencies; and 

f. The possible future consequences of the deficiency. 

4. Specific indicators of material weaknesses Include the following: 

a. Identification of any fraud involving senior management {whether or not material); 





Internal Control—Required Communications 


b. Restatement of previously Issued financial statements to correct a material misstatement 
due to error or fraud; 

c. Identification of a material misstatement in the financial statements by the auditor that 
\wou!d not have been identified by the entity's internal control; and 

d. Ineffective oversight of the entity's financial reporting and internal control by those 
charged \with governance. 

II. Communicating identified Control Deficiencies~The auditor must communicate the significant 
deficiencies and material v/eaknesses identified in the audit. 

A. Form of Communication— Identified significant deficiencies and material weaknesses 
must be communicated in writing to management and those charged with governance. 

Certain matters may not be communicated to management when communication would be 
inappropriate (e.g., matters that raise questions about management integrity or competence). 
Lesser matters (not significant deficiencies) may be communicated to the appropriate level of 
operational management with the authority to take remedial action. Such lesser matters may be 
communicated either orally or in writing. 

B. Timing— The required communication is best made by the'Veport release date"and should be 
made no later than 60 days following the report release date. The "report release date" is the date 
that the auditor grants the entity permission to use the auditor's report in connection with the 
audited financial statements. 

C. Early Communication is Permitted- The auditor may choose to verbally communicate 
certain significant deficiencies and material weaknesses during the audit (e.g., to permit timely 
correction). However, all identified significant deficiencies and material weaknesses must still be 
communicated in writing no later than 60 days following the report release date, including those 
matters communicated orally during the audit 

D. Other Matters— The auditor may choose to communicate other matters believed to be beneficial 
to the entity (including deficiencies that are not "significant deficiencies") either in writing or 
verbally. If communicated verbally, the auditor must document such communication. 

E. The written communication about significant deficiencies and material weaknesses should: 

1. State that the purpose of the audit was to express an opinion on the financial statements, not 
to express an opinion on the effectiveness of Internal control 

2. State that the auditor is not expressing an opinion on the effectiveness of internal control 

3 . State that the auditor's consideration of Interna! control was not designed to identify all 
significant deficiencies or material weaknesses. 

4. Include the definition of the terms material weakness and significant 
deficiency, as applicable. 

5. Identify the matters that are considered to be material weaknesses 
and significant deficiencies, as applicable. 

6. State that the communication is intended solely for the use of 
management, those charged with governance, and others within 
the organization (it should not be used by anyone other than those 
specified parties)—if such a communication is required to be given 
to a governmental authority, that specific reference may be added. 


Note 

The auditor may Include 
additional statements 
regarding the general 
inherent iimitations 
of internal control, 
induding the possibility of 
management override, but 
such comments are not 
required. 
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as of and foi- the year ended December 31,20XX;)n accordance with auditing standards generally 
accepted in the United States of America, we considered the Company's internal control over financial 
reporting (internal control) as a basis for designing bdf additihg procedures fdr the (^ufjiidE of 
expressing our opinion on the financial statements, but not for the purpose of expressing an opinion 
on the effectiveness of the Cdmpahy's internal control. Accordingly, we do not express an opinion on 
the effectiveness of the Company's internal control. 

Our consideration of internai control was for the limited purpose described in the preceding 
paragraph and was not designed to identify alt deficiencies in internal control that might be significant 
deficiencies or material weaknesses and therefore, there can be no assurance that all deficiencies, 
significant deficiencies, or rnaterial weaknesses have been identified. However, as discussed below, 
we identified certain deficiencies in internal control that we consider to be material weaknesses (and 
other deficiencies that we consider to be significant deficiencies—add this phrase only ifapplkable). 

A defidency in internal control exists'when the design or operation of a control does not allow 
management oremployees, in the normal course of performing theirassigned functions, to prevent, 
or detect arid correct misstatements on a timely basis. A material weakness is a deficiency, or a 
eombihatlon of deficiencies, in internal control, such thatthere is a reasonable possibility that a 
material misstatement of the entity's financial statements will not be prevented, or detected and 
corrected on a timely basis. (We consider the following deficiencies in the Company's internai control 
to be material weaknesses;) 

(Describe the material weaknesses that were identified.) 

(A significant deficiency is a deficiency, or a combination of deficiencies, in internal control that is less _ 
severe than a material weakness, yet important enough to merit attention by those charged with 
governahce. We consider the following deficiencies to be significant deficiencies in internal control:) - 



ThiS'Cbrnmunication is intended solely for the information and use of management, (/dent/fy t/iebody 
or individuals charged with governance), others within the organization, and [identify any specified 
governnientai authorities) and is not intended to be and should-ndt be used by anyone other than . 
these specified parties. . ' ^ 


F. The auditor should not issue a written communication stating that no significant deficiencies were 

identified_However, the auditor Is permitted to add a Comment that no material weaknesses 

were Identified, perhaps as requested to submit to a governmental authority. 

G. Management may issue a written response to the auditor's communication to indicate corrective 
action taken or planned or stating management's belief that the costs of correction exceed the 

benefits_If such a written response is included with the auditor's communication, the auditor 

should add a paragraph to disclaim an opinion on management's written response. 
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competence and objectivfe^ft^ijajnsiderir 
purposes of assessing cc " — 


ditors' 

Itfuncdonfor 

rocedures. 


I. AlCPA Guidance—The relevant AlCPA guidance Is provided by AU 610 (SAS No. 128), Using the Work of 
Internal Auditors, which has been clarified to be consistent with International Standards on Auditing. 


The requirements of this standard do QOtdpply if (1) the .ic tivitios of the internal audit function are not 
relevant to the audit, or (2) the extera^^|ji|@r4of s not expect to use the v.bfk of the interna! audit 
function in obtaining audit evldence^'l^^^^^quireinent that external .luditors use tne work of an 
internal audit function.;; 

The AlCPA defines an internal audit function as "a function of 9 n performs assurance and 

consuiting activities designed to evaluate and improve the effectlv^^Spf.the entity's governance, 
riskmanagement, and Internal control processes.": 


II. Two Ways to Use the Work of an Internal Audit Function—^The external auditor may use the 
internal audit function to (1) obtain audit evidence that modifies the nature, timing, or extent of 
audit procedures to be performed by the external auditor; and/or (2) provide direct assistance to the 
external auditor under the external auditor's direction, supervision, and review. 

A, Using the internal audit function to obtain audit evidence means, in effect, substituting the 
interna! auditors'work (related to tests of controls and/or substantive procedures) in place of work 
that would otherwise be performed by the external auditor. 

1. There are three necessary conditions before the external auditor may use the internal audit 
function to obtain audit evidence 

a. Objectivity~The internal audit function's organizational status (dealing with the level to 
whom the function reports, such as those charged with governance, rather than middle 
management) and relevant policies and procedures must support the objectivity of the 
internal auditors. 

b. Competence—-The interna! auditors must be competent (related to their education, 
experience, certification, etc.) to perform reliable work. 

c. Systematic and disciplined approach—^The internal audit function must apply 
a "systematic and disciplined approach, including quality control."The external 
auditor should not rely on "Internal audit-like" work that is conducted in an informal, 
unstructured, or ad hoc way. However, the degree of formality and structure may vary 
with the nature, size, and complexity of the entity involved. 

2. Significant judgments—ITie external auditor should make all significant audit judgments. 

3. The external auditor should perform more of the work directly when (a) the degree of 
judgment involved increases, (b) the assessed risk of material misstatement increases, (c) the 
organizational status and objectivity of the Internal auditors decreases, or (d) the competence 
of the interna! auditors decreases. 

4. Procedures to be performed by the external auditor when using the work of the internal audit 
function to obtain audit evidence include the following: 
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a. The external auditor should read the internal audit function's reports related to the work 
the externa! auditor plans to use; 

b. The externa! auditor should perform procedures to determine whether the internal audit 
function's work was adequately planned, performed, reviewed, and documented, and 
whether the conclusions reached were appropriate; and 

c. The externa! auditor should reperform some of the internal audit function's work that the 
external auditor plans to use. 

S. Communication with those charged with governance— The external auditor should 
communicate plans to use the work of the internal audit function to obtain audit evidence. 

B. Using the internal audit function to provide cUrect assistance means using internal auditors to 
perform audit procedures subject to the external auditor's direction, supervision, and review. 

1, There are two necessary conditions before the external auditor may use the internal audit 
function to obtain audit evidence. 

a* Objectivity— The internal audit function's organizational 
status and relevant policies and procedures must support the 
objectivity of the internal auditors. 

b. Competence— The internal auditors must be competent to 
perform reliable work. 

Determining the nature and extent of the internal auditors' 
direct assistance— The external auditor should consider the 
internal audit function's objectivity and competence, the assessed 
risk of material misstatement, and the amount of judgment 
involved. 

Procedures to be performed by the external auditor when using the internal audit function to 
provide direct assistance 

a. The external auditor should obtain written acknowledgment from management or 
those charged with governance (either as part of the engagement letter or as a separate 
document) that the internal auditors will be allowed to follow the external auditor's 
directives without interference. 

b. The external auditor should appropriately direct, supervise, and review the work 

performed by the internal auditors. 

c. The external auditor should test some of the work performed by the internal auditors. 

Communication with those charged with governance—The external auditor should 
communicate how the auditor plans to use the internal auditors to provide direct assistance. 

III. Documentation Requirements 

A. When using the internal audit function to obtain audit evidence, the external auditor should 
document the following; 

1. The evaluation of the internal audit function's organizational status and objectivity of 
the internal auditors, the function's competence, and the application of a systematic and 
disciplined approach; 

2. The nature and extent of the work used and the basis for that decision; and 

3. The external auditor's procedures performed to evaluate the work of the internal audit 
function. 

8. When using the internal audit function to provide direct assistance—the external auditor should 
document the following; 


Note 

/I systematic and 
disciplined approach is not 
a requirement for usmg the 
mtemalaudlthinctian to 
provide direct assistants 
Since the internal aadltois' 
work IS subjectto the 
direction, supervision, 
and review of the external 
auditor. 


3 . 
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1. The evaluation of the internal audit ftjnction's organizational 
status and objectivity of the Internal auditors and the function's 
competence; 

2. The basis for the external auditor's decision about the nature and 
extent of the work performed by the internal auditors; and 

3. Identification of the working papers prepared by the internal 
auditors, and the nature and extent of the external auditor's review 
and testing of the internal auditors'work. 


Note 

There is no division of 
responsibiilty regarding 
the work of the internal 
auditors. The external 
auditor's report should 
notreferto thefnternal 
auditors'work in the 
audit report! The external 
duditorremains fully 
responsible for all the 
conclusions expressed, 


143 




Obtaining Evidence 



145 






After studying this ir^ssony you should be able to: 

1. Understand what is meant by the.term trdnsdcffeh Why audithts tendfe 

transaction cycles when assessing control risk. 

2. Identify several examples of transactiori cycles *at an auditor might .consider. - 


I. Transaction Cycle— A transaction cycle is a group of essentially homogeneous transactions, that is, 
transactions of a particular type. The bulk of a company's economic activities can be grouped into a 
relative few categories called transaction cycles. 

II. Implication— Within a given category of transactions, control risk Is essentially constant, since all 
transactions within that category are processed subject to the same configuration of internal control 
policies and procedures. A transaction cycle is, therefore, the highest level of aggregation for which 
control risk may be viewed as a constant. 

III. Transaction Cycles Covered in This Lesson 

A. Revenue/receipts 

B. Expenditures/disbursements 

C. Payroll 

D. inventory, especially manufactured inventory (since purchased inventory would be similar to 
expenditures/disbursements as presented here) 

E. Fixed assets 


F. Investing/financing 


IkamHiiit 

As-a.toplto analyze the audit considerations of internal control policies and procedures In each transaction cycle, 
rdmembeT that Internaf controls: (specifically,"control activities") should^CARE"! Note thatthis is intended to be a 
helpful memory aid simply to recall some basic points of emphasis that are useful to auditors in looking at the relative 
strength or weakness of controls ih a particular transaction cycle. In this ontext, "SCARE" represents: 

Segregation of duties, 

Controls (as in physical controls), 

Authorization, .s 

Reviews (as in performance reviews), and ' ^ .. ' 

! EDP/tT(informationprocessing). 




IV. The Framework "SCARE"—This acronym is easy to remember and it is 
helpful in identifying relevant internal control considerations that are 
associated with "control activities" in the AlCPA Professional Standards: 

A. Segregation of Duties—This is also referred to as separation of duties 
and involves separating incompatible functions to the extent possible. 
The same employee should not normally (1) authorize transactions 
(execution function), (2) have access to the related assets (custody 
function), and (3) perform accounting activities (record keeping 
function) in the ordinary course of duties. In essence, these three 


Note 

The applicable SAS 
describes control 
actMtiesin ferm5 of five 
spedlicconsiderationst 
(}) authorization; 

(2) segregation of duties; 
(3} physical controls; 

(4} information processing; 
and iS) performance 
reviews. 
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specific Transaction Cycles 


activities are like points on a triangle and each point of the triangle should ideally be vested in 
different employees, subject to cost-benefit considerations. 

Controls (Physical Controls)—-Access to assets (and to important accounting documents and 
computer systems) should be limited to authorized personnel. In addition, assets should be 
periodically counted, as appropriate, and compared to the corresponding accounting records for 
agreement. This is important in safeguarding assets and in establishing accountability for assets. 

Authorization—Transactions should be executed in accordance with management's 
authorization. 

Reviews (Performance Reviews)—Actual performance should be compared to appropriate 
budgets and forecasts. Internal data should be compared to external sources of information as 
appropriate. Analyses of relationships should be performed and investigative and corrective 
action should be taken as needed. 

EDP/IT (Information Processing)—Information technology (IT) 
controls consist of two basic categories: 

1. General controls, which are policies and procedures that have 
widespread effect on mariy specific applications 

2, Application controls, which refer specifically to the processing of 
particular computer applications 


Note 

information technology. 
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After studying this iesson/you should be able to: 

1. Identify the primary accounting documents and internal control objectives associated with an 
entity's revenue-receipts cycle (with emphasis on sales recognition). 

2. Understand the primary control activities normally associated with an entity's revenue-receipts 
cycle (with emphasis on sales recognition). 


I. Flow Chart of Typical Internal Controls for Sales 



Post the 
month’s 
sales to the 
General 
Ledger 


H. interna) Control Objectives—The objectives of internal controls in this area are to provide reasonable 
assurance that: 

A. Goods and services are provided in accordance with management's authorization (and based on 
approved orders). 

B. Terms of sale (including prices and any discounts) are In accordance with management's 
authorization. 

C. Credit terms and limits are properly established (as authorized). 

D. Deliveries of goods and services result in accurate and timely billings. 

E. Any sales-reiated discounts and adjustments (including returns) are in accordance with 
management's authorization. 

III. Audit Considerations (Framed by "SCARE")—The entity's control activities should address the 
following matters: 

A. Segregation of duties—Separate the execution (authorization), record-keeping (accounting), 
and custody (access) functions. 

1. Credit to customers should be granted by an independent department (separate from sales 
staff which may be paid on commission and which may have an incentive to view everyone as 
creditworthy). 

2. An independent employee should review the statements to customers. 

3. Returns should be accounted for by an independent clerk in the shipping/receiving area. 

B. Controls (Physical Controls) 

1. Computer passwords should be used to limit unauthorized access to the accounting systems. 

2. Any inventory involved should be secured with access limited to authorized personnel. 
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Revenue/Receipts—Sales 


C. Authorization—The entity's transactions should be executed as authorized by management. 

1. Management should review the terms of sales transactions and indicate that approval on the 
sales invoice (billing). 

2. Management should usually establish general approvals of transactions within specified limits 
and specifically approve transactions outside of those prescribed limits. 

3. Management should approve the entity's adjusting journal entries. 

D. Reviews (Performance Reviews) 

1. The entity's recorded sales should be compared to appropriate budgets and forecasts. 

2. Related accounting documents should be compared on a timely basis—for example, sales 
invoices and shipping documents should be compared to verify that the sales transactions 
were recorded in the proper period, which is referred to as proper cutoff. 

E. EDP/IT (information Processing) —^The auditor should agree the financial statement amountfs) 

to the applicable general ledger account(s). 

1. Important accounting documents (e.g., shipping documents and sales invoices) should be 
prenumbered and the numerical sequence should be accounted for. 

2 . An aged trial balance for accounts receivable should be agreed (or reconciled) to the general 
ledger control account; the aging provides important information about the quality of the 
receivables and the need for follow-up audit procedures. 
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Identify the primary ac 
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I, Flow Chart of Typical Processing of Cash Receipts 


(Checks) 



II. Internal Control Objectives— The objectives of internal controls in this area are to provide reasonable 
assurance that: 

A. Access to cash receipts records and accounts receivable records Is limited to authorized personnel. 

B. Detailed cash and account balance records are reconclled wlth control accounts and bank 
statements at least monthly. 

C. All cash receipts are correctly recorded in the period received. 

III. Audit Considerations (Framed by "SCARE")— The entity's control activities should address the 
following matters: 

A. Segregation of Duties 

1. A listing of cash receipts (sometimes referred to as a remittance listing or log of cash receipts) 
is prepared upon opening the mail in the mall room; checks are restrictively endorsed 
immediately ("for deposit only...") 

2. Cash-related activities, which are handled by separate personnel as appropriate are as follows: 

a. Opening the mail—handling the checks received, and verifying the accuracy of the 
payment indicated on the enclosed "remittance advice" (the stub returned with the 
customer's payment on account) 

b. Making the deposit—deposits should be made daily 

c. Applying payments received to the appropriate customers'accounts receivable 

d. Preparing the bank reconciliation on a timely basis 


1. Employees with access to cash receipts should be "bonded," which is a type of insurance for 
which the employer pays an insurance premium and which involves background checks on 
the applicable employees. 












Revenue^eceipts—Cash 


2. Receipts should be deposited daily, not accumulated in someone's desk drawer for an 
occasional deposit. 

3. Access to cash receipts (including access to documents) should be limited to those 
authorized—that includes the appropriate use of passwords. 

4. The company might use a lockbox whereby payments from customers are directly received by 
the bank, thereby avoiding the company's mail room. 

C. Authorization—'The entity's transactions should be executed as authorized by management. 

1. Adjusting journal entries should be approved by management. 

2. Bank reconciliations should be appropriately reviewed with the reviewer's approval indicated. 

D. Reviews (Performance Reviews) 

1. The initial cash receipts listing from the mall room should be compared to the total according 
to the cash receipts journal, and traced to that day's bank deposit to show that what was 
received was, in fact, deposited. 

2. The cash accounts should be reconciled with the bank statements on a timely basis by 
someone not involved in handling cash receipts or updating the accounting records. 

E. EDP/IT (Information Processing) 

1. In general, there should be adequate documentation supporting transactions and account 
balances (important documents should be prenumbered and the numerical sequence 
properly accounted for). 

2. For cash transactions received onsite, there should be adequate po/nf of so/e cash registers 
and use of prenumbered receipts. 
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Affei’ studying this «>$son, you should lH|abi6 to: 

1. Identify the prirr jry accounting dOCun|ents and internal control objectives associated with an 

entity's expendiurre/«i|^^^^^^^^*€- 

2. Understand the p normally associated with an entity's expenditure/ 

disbursements;'>r 


I. Flow Chart of Typical Processing for Expenditures/Disbursements 


Purchase 

Request 


Purchase 
Order (P.O.) 


"Receiver" 


Supplier’s 

Invoice 


Purchases 

Journal 


General 

Ledger 


Check with 
Remittance 
Advice 

4 

Cash 

Disbursements 

Journal 


I General 

1 Ledger 


II. Objectives of Internal Controls over Purchases and Accounts Payable— The objectives are to 

provide reasonable assurance that: 

A. Goods and services are obtained in accordance with martagement's authorization and based on 
approved orders—considering quantity, quality, vendors, etc This is usually handled by a separate 
"Purchasing Department"to centralize these activities. 

B. The terms of acquisitions (including prices and quantities) are in accordance with management's 
authorization. 

C. All goods and services received are accurately accounted for on a timely basis. 

D. Adjustments to vendor accounts are made according to management's authorization. 

E. Only authorized goods and services are accepted and paid for (and payments are timely to take 
advantage of any cash discounts available for prompt payment). 

F. Amounts payable for goods and services received are accurately recorded and properly classified. 

G. Access to purchasing, receiving, and accounts payable records is limited to authorized personnel. 

III. Objectives of Internal Controls over Cash Disbursements— The objectives are to provide 

reasonable assurance that: 

A. Disbursements are for authorized expenditures as approved by management. 

B. Disbursements are recorded at the proper amounts and with the appropriate classifications. 

C. Periodic comparisons are made between the supporting detailed accounting records (including 
bank reconciliations) and the general ledger control accounts. 

D. Any adjusting journal entries for cash accounts are in accordance with management's 
authorization. 

E. Access to cash and disbursement records Is limited to authorized personnel. 
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Expenditures/Disbursements 


IV. Audit Considerations {Framed by"SCARE") — ^The entity's control activities should address the 
fo{lo\A/ing matters related to the expenditures/disbursement transactions cycle: 


1. A separate purchasing department handles the purchasing activities {after a duly approved 
request for goods or services has been received from the department making the request). 

2. The purchasing personnel (execution function) are Independent of those in receiving 
(custody function) and in accounting (record-keeping function), including the accounts 
payable personnel. The accounts payable personnel should also be independent of those 
involved in processing the related cash disbursements. 

3. Bank reconciliations are prepared by someone not having other involvement in handling cash 
receipts, cash disbursements, or record keeping. 

B. Controls (Physical Controls) 

1 . There should be appropriate physical control over unused checks to limit access to authorized 
personnel. 

2 . Employees with the ability to initiate cash disbursements should be "bonded." 

3. Access to cash disbursements or to related documents should be limited to authorized 
personnel. 

C. Authorization— The entity's transactlons should be executed as authorized by management. 

1. All adjusting journal entries should be approved by management. 

2 . Only authorized personnel should be able to order goods and services on the company's 
behalf. 

3 . The department requesting the purchase of goods or services should indicate their 
acceptance of the goods or services received and approval, before payment is made. 

0. Reviews (Performance Reviews) 

1. An appropriate employee should compare the suppliers'monthly statements with recorded 
payables. 

2 . An appropriate employee should compare the purchase order, "receiver,"and vendor's 
invoice for agreement to establish that the invoice is for goods and services received and 
as authorized. (The Invoice should be approved before payment is made and available cash 
discounts for prompt payment should be taken.) 

E. EDP/IT (information Processing) 

1. Detailed records should be maintained to support the general ledger payable account. 

2. Prenumbered purchase orders should be used (and the numerical sequence accounted for). 

3. Prenumbered checks should be used (and the nurherical sequence accounted for). 

4. The supporting documents (including vendors'invoices) should be canceled as "paid" 
immediately upon payment to prevent double payments. 

5. Two signatures should be required on checks. (Any signature plates should be kept in a secure 
place to prevent unauthorized use.) 

F. Note the difference between a"vouchers payable"system and an "accounts payable"system: 

1. An accounts payable system keeps track of payables by the name of the vendor. (Hence, 
payables are identified by the total amount owed to the various individual suppliers.) 
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Performing Further Procedures and Obtaining Evidence 


2. A vouchers payable system keeps track of individual transactions without summarizing 
amounts owed in total to individual vendors. {There can be numerous vouchers payable to an 
individual vendor, but the payables are identified by voucher number, not by vendor name. 

An entity that uses a vouchers payable system can confirm individual transactions, but cannot 
confirm the total amount owed to a given vendor, which has implications to the vendor's 
auditor and how confirmation requests should be designed.) 
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Payroll Cycle 

After studying this lesson, you should be able to: 

t. Identify the primary acc .«lng documents and internal control objectives associated with an 
entity's payroil cycle. 

2. Understand the primary control activities normally associated witl^^^tity's payroll cycle. 


I. Flow Chart of Typical Internal Controls for Payroll 



II. Objectives of Internal Controls over Payroll —^The objectives are to provide reasonable assurance 
that: 

A. Payroll withholdings and deductions are based on appropriate supporting authorizations. 

B. Compensation is made only to valid employees at authorized rates and for services actually 
rendered. 

C. Gross pay, withholdings, deductions, and net pay are correctly computed. 

D. Payroll costs and liabilities are appropriately classified and summarized in the proper periods. 

E. Appropriate comparisons are made of personnel, payroll, and work records at reasonable 
intervals. 

F. Net pay and related withholdings are remitted to the appropriate employees and agencies. 

G. Access to sensitive personnel fifes and payroll records Is limited to authorized personnel. 

ill. Audit Considerations (Framed by "SCARE")— -TTie entity's control activities should address the 
following matters: 

A. Segregation of Duties 

1. The following activities should be performed by different personnel when circumstances 
permit: 

a. Establishing and maintaining employee files In the personnel department 

b. Timekeeping 
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Performing Further Procedures and Obtaining Evidence 


c. Payroll preparation and updating the accounting records 

d. Check distribution 

e. Reconciling the payroll bank account with the general ledger account 

2. The treasurer should typically sign the payroll checks. 

3. An appropriate departmental supervisor should distribute the payroll checks to employees in 
that department. 

4. Unclaimed checks should be controlled.That is, they should be returned to treasury, secured, 
and eventually destroyed, if not claimed within an appropriate time. 

B. Controls {Physical Controls) 

1. Access to personnel files (containing sensitive information) should be limited to authorized 
personnel. 

2. Access to payroll checks should be limited to authorized personnel. 

3. Personnel with access to payroll checks should be bonded. 

C. Authorization—The entity's transactions should be executed as authorized by management. 

1. Payroll should be authorized by a responsible official. 

2. Payroll computations should be verified by an independent person. 

3. Overtime payments should be approved by management. 

4. Payroll for management should also be appropriately reviewed and approved. 

D. Reviews (Performance Reviews) 

1. A company should maintain current and accurate payroll information (which should be 
periodically matched with information in the personnel files). 

2. The payroll checks written should be reconciled to the payroll register, serving as the 
supporting accounting record for each payroll period. 

3. Other appropriate reconciliations should be made on a timely basis: for example, in a 
manufacturing environment, someone should reconcile the job cost time sheets to time clock 
cards. (For strict internal control purposes, a company should use time clocks where possible.) 

E. EDP/IT (Information Processing) 

1. Payroll checks should be prenumbered (and the numerical sequence accounted for). 

2. A company should maintain a separate checking account specifically for payroll transactions 
to establish more accountability and control over these important transactions. 

r 
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Identify the Interr ' ntrolobjectivi associated with miscellaneous tran< . lion cycles 
i (manufacturedinventory,and investing/finaDCir^)^!^/, ’,,,V 

' 2 , Understand the p i / ontrol activities normally assxiated with miscellj -ous transaction 



I. Production/Manufacturing Inventory 

A. The Major Objectives of Internal Controls —In this area, the primary objectives are to provide 

reasonable assurance that: 

1. The resources obtained and used in production (including raw materials, work-in-process, and 

finished goods) are accurately recorded on a timely basis. 

2. Transfers of finished products to customers or others are accurately recorded. 

3. Related expenditures are appropriately classified. 

4. Access to all categories of inventory (and inventory-related documents) is limited to 

authorized personnel. 

5. Comparisons of actual inventory on hand are made to recorded amounts at least annually. 

B. Audit Considerations (Framed by "SCARE")-~The entity's control activities should address the 

following matters: 

1. Segregation of duties 

a. To the extent possible, the company should separate the authorization of inventory- 
related transactions, the custody of (or access to) inventory, and the accounting record 
keeping activities. 

b. Sales returns (inventory) should be Immediately counted by the receiving clerk and a 
receiver (i.e., a receiving document) prepared to verify the quantity and condition of the 
goods received. 

2. Controls (physical controls) 

a. Access to the inventory should be limited to authorized personnel (the inventory should 
be physically secured with access restricted to personnel having authorized keys or 
passcodes). 

b. Access to the important accounting documents, including applicable shipping 
documents, should be limited to authorized personnel. 

3. Authorization— The entity's transactions should be executed as authorized by management. 

a. The acquisition and distribution of inventory should be consistent with management's 
authorization. 

b. Management should establish general approvals of transactions within specified limits, 
and specifically approve transactions above those limits. 

c. Any adjusting journal entries (including sales returns and allowances, or adjustments to 
inventory, such as write-downs) should be approved by management. 


a. Actual inventory should be compared periodically to recorded inventory (and any 
unusual differences should be investigated). 
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Performing Further Procedures and Obtaining Evidence 


b. In a manufacturing context, appropriate reconciliations should be made of underlying 
accounting records (including applicable job order cost sheets or process cost 
worksheets) to the applicable inventory-related general ledger accounts. 

S. EDP/IT (Information processing) 

a. The company should use prenumbered purchase orders for raw materials and 
components of production, along with prenumbered receivers, the receiving document. 
(The numerical sequence of these documents should be properly accounted for.) 

b. The company should consider using a perpetual inventory system for items with high 
cost per unit. 

c. The company should maintain adequate support for related general ledger control 
accounts. 

II. Fixed Assets Cycle— The major objectives of internal controls In this area are to provide reasonable 
assurance that: 

A. Transactions involving property, plant, and equipment are accurately recorded and classified; and 
are in accordance with management's authorization. 

B. Estimates used in the determination of depreciation, depletion, and amortization of the assets' 
cost basis are reasonable and consistent overtime; any changes should be properly approved. 

C. Fixed assets are reasonably secure from loss with appropriate property insurance in force. 

D. Supporting detailed records are maintained and periodically compared to the assets on hand. 

E. Any adjusting journal entries related to fixed assets are approved by the management 

III. Investing/Financing Cycle— The major objectives of internal controls in this area are to provide 
reasonable assurance that: 

A. Transactions involving investments and financing are accurately recorded and classified on a 
timely basis; and as authorized by management 

1. Investing— As used here, this refers to decisions related to the composition of the 
company'sportfolio of investment assets, both current and noncurrent. 

2. Financing— This refers to decisions related to the structure of the company's noncurrent 
liabilities and stockholders'equity sections of the balance sheet. 

B. Investment assets should be reasonably secure from loss with procedures established to 
monitor the associated risks. Access should be limited to authorized personnel with appropriate 
segregation of duties. 

C. Supporting detailed records should be maintained and compared periodically to actual 
investment-related assets of the company. 

D. Any adjusting journal entries related to Investment-related assets, liabilities, or stockholders' 
equity are approved by management. 
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Overview 





it Studying this iesson, you should be able to: 

Know the two cate of "substantive* audit procedures \ iv^o categones of^tests of 

details"). ''' 

Know the mea^^^fche term analytical procedures the three general f^ rposes s^ by 
analytical proc ^^^^ ^^^^four considerations that determine the efficiency and effec 
of analytical used for substantive pi irpo i s 

Familiarize yourselfwith the fundamental r.itiutihcit in mo loft' n i^sociouo* n h ii 
substantive analytical procedures 


I. The Audit Risk Model —Recall the audit risk model that applies to the assertion level for classes of 
transactions, account balances, and disclosures (note that this audit risk model does not apply at 
the overall financial statement level): AR = IR xCR x DR; where detection risk is the only component 
within the auditor's direct influence and which is essentially set by specifying the nature, timing, and 
extent of the auditor's substantive audit procedures. 

A. Nature— The auditor has to decide what specific substantive procedures to perform. This includes 
determining how much emphasis should be placed on tests of details (which tend to be labor 
intensive and expensive, but which provide a relatively stronger basis for conclusions for most 
financial statement assertions) versus substantive analytical procedures (which tend to be less 
labor intensive and less expensive, but which provide a relatively weaker basts for conclusions for 
most financial statement assertions). 

B. Timing— The auditor has to decide whether to perform the important substantive procedures, at 
an "interim"date (meaning any date prior to year-end and before the books are closed) or at"final" 
(at year-end and after the books are closed). 

C. Extent —The auditor has to decide how large the samples sizes should be. Since the audit work is 
performed on a test basis, should the sample sizes be relatively,large or can smaller sample sizes 
be justified? 



D. AU 330, Performing Audit Procedures in Response to Assessed Risks and Evaluating the Audit 
Evidence Obtained, states: 
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Performing Further Procedures and Obtaining Evidence 


"In some cases, the auditor may find It impossible to design effective substantive procedures that, 
by themselves, provide sufficient appropriate audit ewidence.M the relevant assertion level. This may 
occur when an entity conducts its business using IT and no docurnentation of transactions is produced 
ormaintained,otherthanthroughthelTsystem.'?f ^ ^ 


In such cases, the auditor would be required to perform tests of the relevant controls, in addition to the 
planned substantive procedures. 



Question 

Under these circumstances, what would be the consequences if the required tests of 
controls indicate that internal control is Ineffective and cannot be relied on? 


Answer: 

If the auditor's substantive procedures by themselves are Insufficient and if internal control is 
ineffective, the auditor would not have obtained sufficient appropriate evidence to afford a reasonable 
basis for the opinion. In other words, these circumstances would constitute a scope limitation! 


II. Substantive Audit Procedures— These are audit procedures that are directly related to the financial 
statement elements and disclosures. Recall that the word substantive is derived from substantiate, 
which means"to verify that substantive procedures are those audit procedures designed to verify 
the entity's financial statement elements and disclosures" or, In other words, "to search for material 
misstatements if there are any." 


A. Tests of Details— These are the relatively precise (but usually rather expensive, labor-intensive) 
procedures (that suggest whether the client's recorded amounts are right or not). 


:Definitipn ' 

Tests ofBhding Verif^ng the client's recorded arnoums by directly:t«tihg tfie composition 

of SdnsatPlifelfy^^^lclient's r ^^B amounts by testing relative pw debits and 

credits (the trar^ictions) tS^Ssed the accoynt balance to changeMi^Jast year s |p^i’'ed balance 
to this year's retried balance. 


B. Analytical Procedures— Recall the AlCPA definition of analytical 
procedures—"evaluations of financial information through analysis of 
plausible relationships among both financial and nonfinancial data." 

1. Analytical procedures serve three distinct purposes: 

a. They are useful as a risk assessment procedure for planning 
purposes; 

b. They are useful (but not required) as a form of substantive 
evidence (and, in this context, are referred to as "substantive 
analytical procedures"); and 

c. The auditor is required to perform analytical procedures as near the end of the audit to 
assist the auditor when forming an overall conclusion about the financial statements. 

2. The AlCPA states that the effectiveness and efficiency of substantive analytical procedures 

depends on the following four factors or considerations: 

a. Nature of the assertion—Substantive analytical procedures may be particularly effective 
in testing for omissions of transactions that would be hard to detect with procedures 
that focus on recorded amounts. In other words, the skillful use of analytical procedures 
may be more effective than tests of details In addressing the completeness assertion, 


interrelatlonshff^—the . 


meaningful expectation 
by which to judge the 
reasonableness of the 
dient^s recorded amount. 
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Overview of Substantive Procedures 


since there may be no supporting documents to examine for transactions that were not 
recorded in the first place! 

b. Piaustbility and predictability of the relationship —Developing a meaningful 
expectation to compare to the client's recorded balance is critical to the skillful use of 
analytical procedures, so the predictability of the relationship is very important. 

a. Relationships in a stable environment are usually more predictable than those in a 
dynamic environment. 

ii. Relationships involving income statement accounts tend to be more predictable 
than those involving balance sheet accounts (since the income statement deals with 
a period of time rather than a single moment in time). 

III. Relationships involving transactions subject to management discretion tend to be 
less predictable. 

c. Availability and reliability of data used —^The reliability of the expectation increases 
when the data used Is (1) obtained from independent outside sources; (2) when it 

is subject to audit testing (either currently or in the past); or (3) is developed under 
conditions of effective Internal control. 

d. Precision of the expectation —^The likelihood of detecting a misstatement decreases as 
the level of aggregation of the data increases. (That is, procedures would be less effective 
for"high altitude"gtobal comparisons than for more focused, specific comparisons. In 
other words, relationships of interest to the auditor might be obscured by the noise 

in the data at a high level of aggregation, whereas those relationships might be more 
Identifiable at a lower level of aggregation. For example, the auditor could focus on sales 
by month broken down by product line instead of simply comparing current annual sales 
currently to the prior year.) 

3. Selected ratios —Such ratios may be tested In Auditing and Attestation as analytical 
procedures or in Financial Accounting and Reporting as financial statement analysis. 


Definition 

Liquidity Ratios (also known 
obligations. 


iis solvenqr 






Measures of an entity's short-term ability to meet its 



a. Working Capital=Currer)t assets - Current liabilities.This is a definition, not a ratio. 

b. Current ratio = Current assets/Current liabilities 

c. Quick ratio(acid-test ratio) = (Cash + Marketable securities + A/R)/Current liabilities 

d. Current cash to debt ratio- Net cash from operations/Average current liabilities 

'befinkion''': ■ 

Activity Ratios (also km^' Qs.rQmovif'Qr^i^eri^ratl^4fi^s\i^ of an entity's effectiveness putting 


e. Asset turnover = Net sales/Average total assets 

f. Receivable turnover = Net (credit) sales/Average trade receivable (net) 

g. Number of days sales in receivables = 365 days/Receivable turnover 

h. Inventory turnover = Cost of goods sold/Average Inventory 

t. Number of days sales in inventory = 365 days/Inventory turnover 

Definition 

Profitability Ratios: Measures of an entity's'OperatIng success (failure) for a period of time. 
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Performing Furrtier Procedures and Obtaining Evidence 


J. Profit margin on sales = Net Income/Net sales 

k. Gross profit percentage = (Sales - Cost of goods sold)/Sales 

l. Rate of return on assets = Net Income/Average total assets 

m. Rate of return on common stockholders'equity = iHet income - Dividends attributable to 
preferred stockholders)/Average common stockholders'equity 

n. Earnings per share - (Net income - Preferred dividends)/Average number of common 
shares outstanding 

o. Price earnings ratio (P-E ratio) = Market price of stock/earnings per share 


Definition 

CdyefageRi 

overtime (i.^i^easures of long-term risk to creditors and the exter^^ 
up toits avai®te capacity). 



p. Debt to total assets ratio = Total liabilitles/Total assets 

q. Debt to equity ratio = lota\\\ab\\\t\es/Tota\ stockho\ders' equity 

r. Times interest earned = Income before interest expense and income taxes/interest 
expense 

s. Cash to debt coverage ratio = Net cash from operations/Average total liabilities 
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After studying this lesson, you should beaMe toj ; 

i;fjy^derstandth| meaning o 

2. Know what constitutes "audit evidence" 

3. Identify the financial statement assertions specified In AltPA Professional Standards (separately by 

category of asserttonr account balances at period end; transactions and events during the period; 
and presentation and disclosure), which can be used as broad audit objectives for which evidence 
must be obtained; ■ 


L Responsibilities under AlCPA Professional Standards 

The relevant AlCPA guidance is provided byAU 500, AuditEvidence.This pronouncement states that 
the auditor's objective is to "obtain sufficient appropriate audit evidence to be able to draw reasonable 
conclusions on which to base the auditor's opinion." 


One'of the"Performance Principles" addresses the importance of obtaining sufficient appropriate 
audit evldence; "To obtain reasonable assurance, which is a high but not absolute level of assurance, 
the auditor : 


A, obtains sufficient appropriate audit evidence about whether material misstatements exist, 
through designing and implementing appropriate responses to the assessed risks." 

II. Audit Evidence 


Definitions 

Audit Evidence: information used by the auditor In arriving at the conclusions on which the auditor's 
opinion is based. Audit evidence includes both information contained In the accounting records 
underlying the financial statements and other information. 

Accounting Records:The records of initial accounting entries and supporting records, such as checks 
and records of electronic fund transfers, invoices, contracts, the general and subsidiary ledgers, journal 
entries and other adjustments to the financial statements that areiiot reflected in Journal entries, 
and records, such as work sheets and spreadsheets, supporting cost allocations, computations, 
reconciliations and disciosures. ^ 

Other information Constituting Audit Evidence: Includes minutes of meetings, confirmations, Industry 
analysts' reports, internal control manuals, and any other informafion obtained by inquiry, observation, 
and inspection. . - 


III. Sufficient Appropriate Audit Evidence 

"Sufficient" refers to the quantity of evidence, whereas "appropriate" refers to 
the quality of evidence in terms of its relevance and reliability. 

A. The quantity of evidence required (related to "sufficient'^ is directly 
related to the risk of misstatement (the greater the risk, the more 
evidence is needed) and inversely related to the quality of evidence (the 
higher the quality, the less evidence is needed). 


Note 

Tfte aud/for sfipu/d phfdfn 
audit ei/idence by testing 
the accounting fecord'i -.:', 
byonolysiSfCeview, : 
and recon0r}gfelated ' 
information; however,.: 
theaccounting records by 
thernselves do not provide 
sUdictenf appropriate 
audit evidence. 
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B. "Renability"is affected by the source and nature of evidence and depends upon individual 
circumstances however, the SAS offers the following guidelines: 

1. Evidence obtained directly by the auditor is more reliable than evidence obtained indirectly 
or by inference (e.g., observation of the application of a control is more reliable than inquiry of 
entity personnel about the application of a control). 

2. Evidence is more reliable when obtained from independent (knowledgeable) sources outside 
the entity; 

3. Evidence generated internally is more reliable when the related controls are effective; 

4. Evidence is more reliable when it exists in documentary form (whether paper or electronic); and 

5. Evidence provided by original documents is more reliable than evidence based on 
photocopies/facsimiles (faxes). 

C. The auditor should consider the.reliability of information used, but the auditor is not normally 
responsible for authenticating the entity's documents.The auditor should obtain evidence about 
the accuracy and completeness of information used to perform further audit procedures (either in 
connection with the actual audit procedure or by testing controls related to the information). 

D. More assurance is obtained from consistent audit evidence obtained from different sources or 
of a different nature ("corroborating" information) than from evidence considered individually. 
When evidence from different sources is inconsistent, the auditor should determine what audit 
procedures are needed to resolve the inconsistency. 

E. Professional judgment is required for"reasonable assurance,"and the auditor does not examine all 
available evidence. The auditor may appropriately consider the cost of information relative to its 
usefulness, although cost alone is not a valid basis for omitting an audit procedure. Audit evidence 

is usua!iy"persuasive"(or suggestive) and is rareiy''conclusive"(orcompelling).The auditor should 

not be satisfied with evidence that is less than persuasive. 

IV. Using "Assertions" to Obtain Audit Evidence— In stating that the financial statements are consistent 
with GAAP, management makes several "assertions" (which are implicit or explicit statements of fact). 

A. Historically, the auditing standards discussed five traditional financial statement assertions: 

1. Existence/occurrence; 

2. Completeness; 

3. Rights and obligations; 

4. Valuation and allocation; and 

5. Presentation and disclosure. 

B. AlCPA Professional Standards now classify assertions in three separate categories for the auditor's 
consideration, related to; 

1. Account balances; 

2. Presentation and disclosure; and 

3. Classes of transactions and events. 

C. There are four assertions specific to "account balances at period end" 

1. Existence—That the assets, liabilities, and equity interests exist. 

2. Completeness—That all assets, liabilities, and equity interests that should have been 
recorded have been recorded.There are no omissions. 

3. Rights and obligations—That the entity holds or controls the rights to its assets, and the 
liabilities are the obligations of the entity. Any restrictions on the rights to the assets or 
obligations for the liabilities must be disclosed. 
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4. Valuation and allocation—That assets, liabilities, and equity interests are included in the 
financial statements at appropriate amounts {relative to the requirements of GAAP} and any 
resulting valuation or allocation adjustments are appropriately recorded. 

D. There are four assertions about "presentation and disclosure." 

1. Occurrence and rights and obligations— That the disclosed events and transactions have 
occurred and pertain to the entity. 

2. Completeness—That all disclosures that should have been Included have been included. 
There are no omissions of required disclosures. 

3. Classification and understandability —^That financial Information is appropriately presented, 
described, and clearly expressed. 

4. Accuracy and valuation— That financial and other information are disclosed fairly and at 
appropriate amounts. 

E. There are five assertions about"classes of transactions and events during the period." 

1. Accuracy— That amounts and other data have been recorded appropriately. 

2. Occurrence —^That transactions and events that have been recorded have occurred. In other 
words, they are properly recorded and valid. 

3. Completeness— That all transactions and events that should have been recorded have been 
recorded. There are no omissions. 

4. Cutoff —^That transactions and events have been recorded in the correct accounting period. 
Note that there are only two ways to record a transaction in the wrong period. One Is by 
recorded a transaction prematurely, which violates the "occurrence" assertion; and the other is 
to record a transaction belatedly, which violates the "completeness" assertion. 


NOt« 

"CutoffNs actually redundant in this context, since establishing "occurrence" (that the recorded transactions are properly 
recorded) and ’Completeness" (that there are no omissions of transactions that should have been recorded) together - .. . • 
establish that the transactions, in fact, have been recorded in the correct accounting period ("cutoff"). However, "cutoff" is an 
irfipprtantissiiije that auditors must address, so this redundancy emphasizes an important auditing concept. 


5. Classification— That transactions and events have been recorded in the proper accounts. 

Categories of Assertions 
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F. This SAS points out that the auditor may use the assertions as presented above or express them 
differently as long as the relevant issues have been addressed. For example, the auditor may 
combine the assertions about transactions and events \wlth those about account balances; and the 
auditor may decline to identify a separate assertion about cutoff if occurrence and completeness 
have been established. 

G. The auditor should use "relevant assertions" (those that have a meaningful bearing on v^/hether the 
account is fairly stated) to assess the risk of material misstatement. The auditor should evaluate 
the nature of the assertion, the volume of transactions or data involved, and the complexity of the 
systems (including IT) by \Arhich the entity processes and controls the information related to the 
assertion. 
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ing this lesson, you should be able to: ; 

L# three categories of audit procedures. 

^d the auditor's responsibility to plan and perform substantive procedures in order to 
Bwye to the risks bfmatedai:fois^temi^t, according to AIGPA Professional 


I. Audit Procedures for Obtaining Evidence— The auditor's basis for conclusion is comprised of three 
categories of procedures; 

A. Risk assessment procedures 

B. Tests of controls 

C. Substantive procedures 


Definitions 

Risk Assessment Procedures: The audit procedures performed to obtain an understanding of the.entlty: 
and its environment, Including the entity's Internal control, to identify and assesstherlsks of material 
misstatement, whether due to fraud or error, at the financial statement and relevant assertion levels/ ' 

tests of COMrof: An audit procedure designed to evaluate the operating effectiveness of coritrbis In/ ; : 
preventing, or detecting and correcting, material misstatements at the assertion level. (Note that \ 
the auditor must perform tests of controls when the risk assessment includes an expectation of the 
operating effectiveness of controls or when the substantive procedures alone do not provide suffiicienii:: : 
appropriate audit evidence.) 

Substantive Procedures: An audit procedure designed to detectthaterial misstatements at the assertion 
level. Substantive procedures comprise (a) tests of details (classes of transactions, account balances, 
arid disclbsurbs) and (b) substantive analytical procedures. 


II. Menu of Specific Substantive Audit Procedures— The auditor rnay use computer-assisted audit 

techniques (CAATs) to assist the auditor when information Is in electronic form: 

A. Inspection of Records/Documents —Examining records or documents, whether internal or 
external, whether paper or electronic, or other media; 

B. Inspection of Tangible Assets —Physical examination of the assets; 

C. Observation —Looking at a process or procedure being performed by others; 

D. Inquiry —Seeking information of knowledgeable persons inside or outside the entity and 
evaluating their responses. Note that inquiry aione does not provide sufficient appropriate audit 
evidence either for substantive purposes or for tests of controls. 

E. Confirmation —Obtaining a representation directly from a knowledgeable third party; 

F. Recalculation —Checking the mathematical accuracy of documents; 

G. Reperformance —^The auditor's execution of procedures or controls 
originally performed as part of the entity's internal controls; 

H. Analytical Procedures —lncludes''scanning''to review accounting data 
to identify unusual items to be tested further. CAATs may be especially 
useful in identifying significant or unusual Items. 


Note* 

Analytical procedures are 
defined as "evaluations 
of financial information 
through analysis of 
plausible relationships 
among both financial and 
nonhnancial data." 
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li. The Auditor Should Plan and Perform Substantive Procedures—The auditor should design the 
substantive procedures to be responsive to the assessed risks of material misstatements. The purpose 
of substantive procedures is to detect material misstatements at the relevant assertion level. 

A. The auditor should perform some substantive procedures for all relevant assertions related to 
each material class of transactions, account balance, and disclosure (regardless of the assessed 
risk of material misstatement), since there are inherent limitations to internal control and the 
assessment of risk is judgmental. 

B. The auditor's substantive procedures should include the following related to the financial 
reporting process: 

1 . Agree the financial statement information to the underlying accounting records. 

2. Examine material journal entries and other adjustments made during the preparation of the 
financial statements. 

C. Nature of Substantive Procedures— These should be responsive to the planned level of 
detection risk; they consist of: 

1. Tests of details 

2. Substantive analytical procedures (should consider testing the controls over the preparation 
of information used in connection with analytical procedures) 

D. Timing of Substantive Procedures— May be performed at an interim date (before year-end) or at 
final (at or after year-end) 

1. Performing substantive procedures at an interim date increases detection risk.The auditor 
should perform additional substantive procedures (or substantive procedures combined with 
tests of control) to mitigate the increased risk and provide a reasonable basis for extending 
the audit conclusions from the interim date to year-end. 

2. It is not necessary to rely on internal controls (i.e., test the operating effectiveness of 
controls) to extend the audit conclusions from the interim date to year-end. However, the 
auditor should consider whether only performing additional substantive procedures is 
sufficient. 

3. When planning to perform substantive analytical procedures for the period following the 
interim date, the auditor should consider whether the period-end balances are reasonably 
predictable as to amount, relative significance, and composition. 

E. Extent of Substantive Procedures— Determine the implications to sample sizes (considering the 
planned level of detection risk, materiality, tolerable misstatement, expected misstatement, and 
the nature of the population). 

F. Evaluating the Sufficiency and Appropriateness of the Audit Evidence Obtained 

1. Consider all relevant audit evidence— The auditor should consider whether the audit 
evidence appears to corroborate or to contradict the relevant assertions in the financial 
statements. 

2. The sufficiency and appropriateness of audit evidence as a basis for the auditor's conclusions 
are matters of professional judgment. The auditor's judgment may be influenced by factors 
such as the following: 

a. The significance of the potential misstatement and the likelihood that it may have a 
material effect 

b. The understanding of the entity and Its environment, including internal control 

c. The effectiveness of management's responses and controls to address the risks 

d. The results of the audit procedures performed (Including whether the procedures 
identified instances of fraud or error) 

e. The persuasiveness of the audit evidence obtained 
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f. The source and reliability of available information 

g. The experience gained in previous audits with such misstatements 

3. Documentation —As covered in the course materials on Internal controls, the auditor should 
document the following matters: 

a. The overall responses to address the assessed risk of misstatement at the financial 
statement level 

b. The nature, timing, and extent of the further audit procedures 

c. The linkage of those procedures with the assessed risks at the relevant assertion level; 

d. The results of the audit procedures 

e. The conclusions reached In the current audit about the operating effectiveness of 
controls tested in a prior audit 
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I. PCAOB Risk Assessment Standards 

The PCAOB issued a suite of eight Auditing Standards comprising its "risk assessment" project in 2010. 
In general, these PCAOB risk assessment standards are remarkably similar to the risk assessment 
standards previously issued (and now clarified) by the AlCPA (Statements on Auditing Standards) and 
by the International Federation of Accountants (International Standards on Auditing), although a few 
(mostly minor) differences are identified below. 

A. PCAOB Auditing Standard No. 8, Aud/tR/sk [AS 1101] 

B. PCAOB Auditing Standard No. 9, Audit Planning [AS 2101] 

C. PCAOB Auditing Standard No. \ 0 , Supervision of the Audit Engagement [AS 1201] 

D. PCAOB Auditing Standard No. Consideration of Materiality in Planning and Performing an Audit 

[AS 2105] 

E. PCAOB Auditing Standard No. 12, Identifying and Assessing Risks of Material Misstatement [AS 2110] 

F. PCAOB Auditing Standard No. 13, The Auditor's Responses to the Risks of Material Misstatement 
[AS 2301] 

G. PCAOB Auditing Standard No. U, Evaluating Audit Results [AS 2810] 

H. PCAOB Auditing Standard No. 15, Aud/t Evidence [AS 1105] 

li. PCAOB vs. AlCPA—Structural Differences 

These PCAOB Auditing Standards are applicable to integrated audits of an issuer's financial statements 
and the internal controls over financial reporting. In contrast, the AlCPA's Statements on Auditing 
Standards focus solely on audits of nonissuers'financial statements. 

ill. Summaries —Summaries of the essence of these PCAOB risk assessment standards. 

A. PCAOB on Audit Risk 

1. Auditor's objective— To conduct the audit of financial statements in a manner that reduces 
audit risk to an appropriately low level. 

2. "Reasonable assurance" means reducing audit risk to an appropriately low level—The 

auditor must plan and perform the audit to obtain reasonable assurance about whether the 
financial statements are free of material misstatements due to error or fraud. 

3. The auditor should assess the risks of material misstatement at two levels: (1) at the financial 
statement level (where the risk of material misstatement is pervasive and potentially involves 
many assertions); and (2) at the assertion level (where the risk of material misstatement 
involves inherent risk and control risk). 


1. Auditor's objective—To plan the audit so that the audit is conducted effectively. 
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2. "Planning the audit includes establishing the overall audit strategy for the engagement and 
developing an audit plan, which includes, in particular, planned risk assessment procedures 
and planned responses to the risks of material misstatement Planning is not a discrete phase 
of an audit but, rather, a continual and Iterative process that might begin shortly after {or In 
connection with) the completion of the previous audit and continues until the completion of 
the current audit." 

a. Overall strategy —Involves rather high-level audit resource allocation issues involving 
the scope, timing, and direction of the audit (guides the development of the more 
specific audit plan). 

b. Audit plan —Deals with the planned nature, timing, and extent of the risk assessment 
procedures, the tests of controls, the substantive procedures, and any other procedures 
required to comply with PCAOB standards. 

3. Engagement partner responsibilities —"The engagement partner is responsible for the 
engagement and its performance. Accordingly, the engagement partner is responsible for 
planning the audit and may seek assistance from appropriate engagement team members In 
fulfilling this responsibility." 

C. PCAOB on Supervision of the Audit Engagement 

1. Auditor's objective—To supervise the audit engagement so that the work is performed as 
directed and supports the conclusions reached. 

2. The extent of supervision required varies with the engagement's circumstances, including 
the size and complexity of the company, the nature of the work assigned to engagement 
personnel, the capabilities of each engagement team member, and the risks of material 
misstatement. (The extent of supervision should be commensurate with those risks.) 

3. Engagement partner responsibilities —"The engagement partner is responsible for the 
engagement and its performance. Accordingly, the engagement partner is responsible for 
proper supervision of the work of engagement team members and for compliance with 
PCAOB standards, including standards regarding using the work of specialists, other auditors, 
internal auditors, and others who are involved in testing controls." 

D. PCAOB on Consideration of Materiality in Planning and Performing an Audit 

1. Auditor's objective—To apply the concept of materiality appropriately in planning and 
performing audit procedures. 

2. The auditor should plan and perform the audit to detect misstatement that, individually or in 
the aggregate, would result in material misstatement of the financial statements. 

3. The auditor should use the same materiality considerations for planning the audit of internal 
control over financial reporting as for the audit of the financial statements. 

4. The materiality level for the financial statements should be expressed as a specified amount 
to determine the nature, timing, and extent of audit procedures. 

5. The auditor should determine tolerable misstatement for purposes of assessing risks of 
material misstatement at the account or disclosure levels. 

£. PCAOB on "Identifying and Assessing Risks of Material Misstatement" 

1. Auditor's objective— To Identify and appropriately assess the risks of material misstatement, 
thereby providing a basis for designing and implementing responses to the risks of material 
misstatement. 

2. The auditor should perform risk assessment procedures sufficient to provide a reasonable 
basis for identifying and assessing the risks of material misstatement and designing further 
audit procedures. 

3. These risk assessment procedures should include (a) obtaining an understanding of the 
company and its environment; (b) obtaining an understanding of internal control over 
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financial reporting; (c) considering Information from the client acceptance/retention 
evaluation, planning activities, prior audits, and other engagements for the company; 

(d) performing analytical procedures; and (e) Inquiring of the audit committee, management, 
and others within the company about the risks of material misstatement. 

4. The auditor should begin by identifying and assessing the risks of material misstatement at 
the financial statement level and then work down to the significant accounts and disclosures 
and their relevant assertions. 

F. PCAOB on "The Auditor's Responses to the Risks of Material Misstatement" 

1. Auditor's objective— To address the risks of material misstatement through appropriate 
overall audit responses and audit procedures. 

2. Overall responses— The auditor should consider (a) making appropriate assignments of 
responsibilities based on capabilities of team members; (b) providing appropriate supervision; 
(c) incorporating a degree of unpredictability in planned procedures; (d) evaluating the 
company's selection and application of significant accounting principles (especially in 
subjective areas); and (e) determining whether it is necessary to make pervasive changes to 
the nature, timing, and extent of audit procedures. 

3. Responses involving the nature, timing, and extent of audit procedures— The auditor 
should address the assessed risks of material misstatement for each relevant assertion of each 
significant account and disclosure. 

a. There are two categories of audit procedures performed in response to the assessed risks 
of material misstatement: (1) tests of controls; and (2) substantive procedures. 

b. The auditor should perform substantive procedures that are responsive to any identified 
significant risks (Including fraud risks). 

c. In responding to fraud risks, the auditor should address the risk of management override 
of controls by examining journal entries, reviewing accounting estimates for biases, and 
evaluating the business rationale for significant unusual transactions. 

G. PCAOB on "Evaluating Audit Results" 

1. Auditor's objective— To evaluate the results of the audit to determine whether the audit 
evidence obtained is sufficient and appropriate to support the opinion. 

2. The auditor must reach a conclusion as to whether sufficient appropriate audit evidence has 
been obtained to support the opinion. 

3. The auditor should consider all relevant audit evidence (whether it corroborates or 
contradicts the financial statements) and evaluate the following: 

a. The results of analytical procedures performed as the overall review 

b. Misstatements (other than "trivial"ones) accumulated during the audit (with emphasis on 
uncorrected misstatements) 

c. The qualitative aspects of the company's accounting practices, including potential for 
management bias 

d. Conditions identified related to fraud risk 

e. The presentation of the financial statements (including disclosures) relative to the 
applicable financial reporting framework 

f. The sufficiency and appropriateness of the evidence obtained 

H. PCAOB on "Audit Evidence" 

1 . Auditor's objective—To plan and perform the audit to obtain appropriate audit evidence 
that is sufficient to support the opinion. 
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2. Sufficient appropriate audit evidence 

a. Sufficiency relates to the quantity of evidence required—the amount of evidence needed 
increases as the risk of material misstatement Increases; The amount of evidence needed 
decreases as the quality of the underlying evidence increases. 

b. Appropriateness relates to the quo//fy of evidence, which Involves (1) relevance and 
(2) reliability. 

3. Financial statement assertions are factual representations that are implicitly or explicitly made 

by management—^The PCAOB Identified the five traditional financial statement assertions 

previously presented in a now-superseded Statement on Auditing Standards; 

a. Existence—-That the assets or liabilities exist at a given date or that the recorded 
transactions have occurred during a given period 

b. Completeness —That there are no omissions of transaction or accounts that should have 
been recorded 

c. Rights and obligations— That the company has the rights to the assets and the 
obligations for the liabilities at a given date 

d. Valuation or allocation— That the financial statement elements are presented at 
appropriate amounts relative to the applicable accounting framework 

e. Presentation and disclosure— That the elements of the financial statements are 
properly classified, described, and disclosed relative to the applicable accounting 
framework 
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IV. Summary of Differences —Summary of fundamental differences between the PCAOB risk assessment 
standards and the AlCPA Auditing Standards Board risk assessment standards. 

A. The PCAOB risk assessment standards apply to integrated audits of issuers (encompassing both 
the company's financial statements and internal control oyerfinancial reporting), whereas the 
AlCPA risk assessment standard apply solely to audits of non-issuers'financial statements. 

B. The PCAOB standards tended to provide a bit more specific guidance in certain areas (such as the 
engagement partner's responsibilities) that were originally addressed in somewhat more general 
terms in the AlCPA standards; however, the AlCPA's clarified auditing standards are now very 
similar to PCAOB auditing standards in these areas. 


C. A more significant difference involves the treatment of''assertions"in their respective standards 
dealing with the topic of audit evidence—the PCAOB focuses on the five traditional financial 
statement assertions (as presented in an earlier SAS that has since been superseded in an attempt 
to align U.S. auditing standards more closely with international standards); the resulting current 
AlCPA standard classifies 13 assertions Into three categories: (1) account balances at the period 
end (for which there are four assertions); (2) transactions and events for the period (for which 
there are five assertions); and (3) presentation and disclosure (for which there are four assertions). 
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Evaluation of Misstatements 
During the Audit 



After studying this lesson, you should be able to: 

1 1; /^Ohderstand the auditor's responsibility to ac^muiate ah'd eyaluateHhe effect of identified 
vroissi^ements on the audit and to evaluate the effects of uncorrected misstatements on the 

2. > Understand the auditor's responsibility to cornmuinicate identified misstatements to management, • • 
rf and;th^^ when management refuses tp correct some (or all) of the identified " 

rnisstatements. v 

3v ^ matters related to misstatements that the auditor is required to document/'^ " ' ' 


I. Responsibilities under AiCPA Professional Standards— The relevant AiCPA guidance is provided 
by AU 450: Evaluation of Misstatements Identified During the Audit. This pronouncement states that 
the auditor's objectives are to evaluate the effect of (1) Identified misstatements on the audit; and 
(2) uncorrected misstatements, if any, on the financial statements. 


Definitions 

Misstgtement A difference between the amount, classification, presentation, or disclpsUre of a 
reported financial statement item and the amount, classification, presentation, or disclosure that is 
required for the item to be in accordance with the applicable reporting framework. (Misstatements 
also Involve matters deemed necessary for the financial statements to be presented fairly, in all 
material respects.) 

Un'corrected Misstatements: Misstatements that the auditor has accumulated during the audit andithat 
have not been corrected. 


IL Expectations Regarding Identified Misstatements and Uncorrected Misstatements 

A. Accumulation of Identified Misstatements —^The auditor should accumulate all misstatements 
identified during the audit (except for those that are dearly trivial, which means inconsequential). 
The auditor may wish to distinguish among the following three types of misstatements: 

1 . Factual misstatements —Misstatements for which there is no doubt. 

2. Judgmental misstatements— Differences due to the judgments of management that the 
auditor considers unreasonable or to the selection of accounting policies that the auditor 
views as inappropriate. 

3. Projected misstatements —^The auditor's best estimate of misstatements in populations as 

suggested by audit sampling. • 

B. Consideration of Identified Misstatements as the Audit Progresses —The auditor should 
determine whether the overall audit strategy and audit plan need to be revised as a resuit of the 
identified misstatements. That would be necessary if the aggregate of accumulated misstatements 
(and other misstatements that may exist) approaches what is considered to be material. 

C. Communication and the Correction of Misstatements —The auditor should communicate 
ail misstatements accumulated during the audit on a timely basis with the appropriate level of 
management and request they correct the misstatements. The appropriate level is the one that 
has the authority to evaluate the misstatements and take necessary action. 

1. If management has examined a class of transactions or account balance at the auditor's 
request (e.g., as a result of an audit sample that indicates a misstatement) and has made a 
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correction—The auditor should perform additional procedures to determine whether any 
misstatements remain. 

2. If management refuses to correct some (or all) of the misstatements—^The auditor should 
obtain an understanding of management's reasons and take that into consideration when 
evaluating whether the financial statements are materially misstated. 

D. Evaluating the Effect of Uncorrected Misstatements 

1. Reassess materiality—^The auditor should reassess materiality to verify that it is appropriate 
in view of the entity's actual financial results. 

2. Determine whether uncorrected misstatements are material~The auditor should 
consider (a) the size and nature of the misstatements; and (b) the effect of uncorrected 
misstatements related to prior periods. 

3. Other (undetected) misstatements may exist when a misstatement results from a break 
down in internal control, or when inappropriate assumptions or valuation methods have 
been widely used. The auditor should consider whether the detected and undetected 
misstatements might exceed materiality. 

4. Circumstances affecting the evaluation of materiality include the following: (a) compliance 
and regulatory requirements; (b) debt covenants; (c) the effect on future periods'financial 
statements; (d) the effects on changes in earnings (such as changing income to a loss or vice 
versa) or other trends; (e) the impact on ratios; (f) the effects on segment information; (g) an 
effect that increases management compensation; (h) the omission of information important 
to users' understanding; and (1) the misclassification between operatingfion-operating items 
orrecurring^on-recurring items. 

E. Documentation of misstatements— The auditor should document the following three matters in 
the audit documentation: (1) the amount below which misstatements would be viewed as clearly 
trivial; (2) all misstatements accumulated during the audit and whether they have been corrected; 
and (3) the auditor's conclusion (and the basis for that conclusion) about whether the uncorrected 
misstatements are material, individually or in the aggregate. 
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After stu#!rig thislfsson, you should b| able to: ^ 

1. Understand th]B^dit t responsibillt^s to prepare and obl^p dos^m^i^ion, in accordance with 
AlCPA Professioi^l St: 'aids j ' - ' j 

2,, Know the between j|iCPA Professional Sland''rds and P^OB Auditing Stanclardl 

with respec^^cun - .idtion"'comp|etion"requiremuiiiand retention Jquirements. 

3. Know the distir^ion tween IbefWftor's "permanent file'and the turr^ year's audit 

documentatiSpJ ^ 


I. Responsibilities under AlCPA Professional Standards— The relevant AlCPA guidance is provided 
by AU 230, Audit Documentation. This pronouncement states that the auditor's objective is to prepare 
documentation that provides: 

A. A sufficient and appropriate record of the basis for the auditor's report; ond 


B. Evidence that the audit was planned and performed in accordance with (GAAS) and applicable 
legal and regulatory requirements." 


pehnttion , 

J^UditDocumentation: This is the 
obtained and conclusions reache 
used). 





toant aid,t evidence 
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II. Purposes of Audit Documentation 

A. Provides the principal support for the auditor's report (regarding the procedures performed and 
the conclusions reached). 

B. Documents the auditor's compliance with GAAS and any applicable legal and regulatory 
requirements; 

1. That the work was adequately planned and supervised; 

2. That an understanding of the entity and its environfnent, including internal control, was 
obtained and evaluated as necessary to assess the risks of materia! misstatement and to 
design the audit to be responsive to those risks; and 

3. That the procedures applied and the evidence obtained provide a reasonable basis for the 
opinion expressed. 

C. The audit documentation assists in controlling the audit work—that is, breaking the overall audit 
project into manageable tasks that can be delegated to the various members of the audit team 
(while documenting the work performed and the conclusions reached, and identifying the work 
yet to be completed). 

Hi. Ownership and Custody Issues 

A. Ownership—Audit documentation is the auditor's property (the auditor should safeguard it and 
establish a formal retention policy). 

B. Confidentiality—The audit documentation is subject to the restrictions imposed by AlCPA 
ethics rules on confidentiality. (The auditor should prevent unauthorized access to the audit 
documentation, since it contains entity-specific confidential information.) 

C. Auditors should apply appropriate controls over the audit documentation to protect the integrity 
of the information at all stages of the audit, to prevent unauthorized changes, and to limit access 
to authorized personnel. 
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Audit Documentation 


IV. AlCPA Requirements 

A. Audit documentation should permit an experienced auditor without prior connection to the audit 
to understand the following: 

1. The nature, timing, and extent of procedures performed; 

2. The results of those procedures; 

3. The conclusions reached on significant matters; and 

4. Whether the accounting records agree or reconcile with the audited financial statements. 

B. Audit documentation should include abstracts or copies of significant contracts or agreements 
examined—if needed by an experienced auditor to understand the basis for conclusions. 

C. Audit documentation should identify the specific Items tested by the auditor (or the identifying 
characteristics of items tested in connection with the substantive procedures and any tests of 
control so that the items tested can be determined as necessary). 

D. The auditor should also document audit findings or Issues that are significant (including 
actionstaken to address them apd the basis for conclusions reached), and should also document 
discussions of significant findings or issues with management (including issues discussed, and 
when and with whom). Such findings and issues include: 

1. Significant matters regarding the selection, application, and consistency of accounting 
principles 

2. Circumstances causing difficulty In applying necessary audit procedures 

3. Results of audit procedures indicating a possible material misstatement 

4. Findings that could result in modification of the audit report 

5. Audit adjustments (whether or not recorded by management) that could have a material 
effect individually or when aggregated 

E. If information is identified that contradicts or is inconsistent with the auditor's final conclusions— 
the auditor should document how the auditor addressed the contradiction or inconsistency in 
forming the conclusions. 

F. Identification of preparer and reviewer—the auditor should document who performed the audit 
work and who reviewed the specific audit documentation. 

G. Should documentthe report re/ease c/ote—^That Is defined as the date the auditor grants the 
entitypermission to use the auditor's report on the audited financial statements. 

V. Revisions— Any revisions to audit documentation after the date of the auditor's report should comply 
with the following requirements: 

A. Documentation Completion Date— The auditor should complete the assembly of the final audit 
file no later than 60 days after the report release date. The PCAOB specifies a limit of 45 days for 
audits of public companies. 

B. Before the Documentation Completion Date —^The auditor may add information received after 
the report date or delete unnecessary documentation up to the documentation completion date. 

C. After the Documentation Completion Date— The auditor must not delete any audit 
documentation before the end of the retention period; the auditor may add to the 
documentation, but must document any materials added, by whom, when, reasons for the 
change, and the effect, if any, on the auditor's conclusions. 

D. Retention Requirements —^The AlCPA requires that the audit documentation be retained for at 
least five years from the report release date. (The PCAOB requires retention for at least seven years 
for audits of public companies.) 
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Performing Further Procedures and Obtaining Evidence 


VI. Additional Documentation—Other Statements on Auditing Standards require additional specific 

documentation, including, for example, the following: 

A. Aggregated Misstatements—The auditor must document: 

1. The nature and effect of misstatements that the auditor aggregates 

2. The auditor's conclusions as to whether the aggregated misstatements are material to the 
financial statements 

B. Analytical Procedures—The auditor must document: 

1. The expectation and factors (sources) considered in developing it, when not otherwise 
apparent 

2. The results of the comparison of that expectation to the recorded amounts (or to ratios based 
on recorded amounts) 

3. Any additional procedures performed (and the results of those procedures) to investigate 
unexpected differences from that comparison 

C. Going-Concern Issues— The auditor must document: 

1. The conditions giving rise to the going concern issue 

2. The elements of management's plan considered Important to overcoming the situation 

3. Evidence obtained to evaluate the significant elements of management's plans 

4. The auditor's conclusion as to whether substantial doubt remains 

5. The auditor's conclusion as to whether an explanatory paragraph should be added to the 
auditor's report 

VII. Quantity of Content— The quantity, type, and content of the audit documentation depends on the 

auditor's professional judgment and may include consideration of the following matters: 

A. The risk of material misstatement in the area involved 

B. The amount of judgment involved in performing the work and interpreting the results (including 

the nature of the audit procedures involved) 

C. The nature and extent of any exceptions identified 

D. The significance of the evidence to the assertion involved . 

E. The need to document a conclusion not readily deternimable from the documentation of the 

work performed 

VIII. Types of Files Related to Audit Working Papers 

A. Permanent File— Involves matters having ongoing audit significance and may include: 

1. Description of the client's industry, a brief history of client, and a description of the client's 
facilities 

2. Abstracts or copies of important legal documents and important long-term contracts— 
documents such as the company's articles of Incorporation and bylaws and contracts such 
as debt agreements, leases, and labor contracts (Including pension plans and profit- sharing 
agreements) 

3. Documentation of the auditor's understanding of internal control for the major transaction 
cycles 

4. Historical financial information —Such as ratio analysis of the client's operations or other 
data having ongoing usefulness 
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B. Current Year's Audit Files—The current year's audit files include the auditor's documentation 
of important administrative matters (such as the audit team's time budget) along with the 
supporting working papers related to the financial statement items. 

1. Audit plan (sometimes called the audit program). 

2. Memoranda (documenting planning activities, consideration of fraud, assessment of internal 
control, etc.}. 

3. Abstracts or copies of relevant client documents (including minutes of board of directors' 
meetings or meetings of those charged with governance). 

4. Letters (confirmations, attorney letters, management representation letter, engagement 
letter, etc.). 

5. Analyses and schedules (either prepared by client personnel or by the audit team). 

C. Bulk File—Where documentation that is too voluminous can be stored (e.g., magnetic tapes, 
extensive computer printouts, etc.). 

D. Correspondence File —Where letters and e-mail messages to and from clients are organized so 
that the audit team can conveniently review communications related to each client organization. 

E. Report File —Where prior years'audit reports and management letters are organized (by client) so 
that the audit team can conveniently review formal reports previously issued for each client. 
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After studying this lesson, y( u shoulJ be able tc 

1. Know the documentatK) rc '.uir^erit*; undn P( AOB Auditing Standards. 

2. Know the prii^Bdiffer^tesfi^Jen PCAOU documentation requirements for issuer ■. '6 ^ 

AlCPA docum^®idnreqMirem^MfonK>nissuer.s (regarding documentation retentw ■■ * 

: dpGumentatiq^pmptetiondate).: 


I. Audit Documentation 


Definition 

Audit Documentation: The written record of the basis for the auditor s conclMsions that provides the 
support for the auditor's representations. Also serves as a basis for the|evl|^ of the guaiityof the 
audit work—the documentation should be prepared in sufficient deta^lo'^fermit an ^perieiiced 
auditor without prior connection to^thi'engagementto understand ah 

the conclusions reached (and to determine who performed the work and bb wh'^t date). 


II. Basic Documentation Requirement—(1 ) Demonstrate that the engagement complied with PCAOB 
standards; (2) support the basis for the auditor's conclusions regarding every relevant financial 
statement assertion; and (3) demonstrate that the underlying accounting records agree to or reconcile 
with the financial statement elements. 

lil. Documentation of Specific Matters 

A. Document audit procedures involving Inspection of documents (including walkthroughs, tests 
of controls, and substantive tests of details)—Identify the specific items tested (or the source 
and specific selection criteria); include abstracts or copies of significant contracts or agreements 
examined. 

B. For matters documented in a central repository or in a particular office of the public 
accounting firm (including issues such as auditor independence, staff training, client 
acceptance/retention, etc.)—The audit documentation should appropriately reference the 
central repository. 

C. Must document all significant findings or issues (also document the actions taken to address 
them and the basis for the conclusions reached)—Including the application of accounting 
principles, circumstances causing modification of planned audit procedures, matters that could 
result in modification of the auditor's report, material misstatements, significant deficiencies 

or material weaknesses in internal control over financial/eporting, difficulties in applying 
audit procedures, and disagreements among members of the engagement team about final 
conclusions on significant matters, among other things. 

D. Ail significant findings or issues must be identified In an engagement completion document 
insufficient detail so that a reviewer can obtain a thorough understanding of the matters. 

iV. Retention of and Subsequent Changes to Audit Documentation 

A. Must retain audit documentation for seven years from the report release date —The report 
release date is when the auditor grants permission to use the auditor's report in connection with 
the issuance of the company's financial statements. (Recall that the AlCPA requires a retention 
period of five years for audits of nonissuers.) 

B. A complete and final set of audit documentation should be assembled no later than 45 days 
after the report release date— That is called the documentation completion date. (Recall that 
the AlCPA allows auditors of nonissuers to have a maximum of 60 days for this purpose.) 
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PCAOB on Audit Documentation 


C. After the documentation completion date —No documentation can be deleted, but 
documentation can be added (must indicate the date the information was added, the name of the 
person preparing the additional documentation, and the reason for adding it). 

D. The office of the firm issuing the auditor's report is responsible for ensuring that all 
documentation complies with PCAOB requirements —Documentation of other auditors 
associated with the engagement (in other offices of the firm or in different firms) must be 
retained or accessible to the office Issuing the report. 
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Confirmatl 


After studying this lesson, you should be able to: 

1. Understand the auditor's responsibility to perform "alternative procedures"for when no response 
has been received for a positive confirmation attempt. 

2. Know the distinction between a "positive" and a "negative" confirmation. 


I. Responsibilities under AlCPA Professional Standards— The relevant AlCPA guidance is provided 
by AU 505, External Confirmations. This pronouncement states that the auditor's objective is "to design 
and perform externa! confirmations to obtain relevant and reliable audit evidence." 


Definition 

External Confirmation: Audit evidence objalned as a dirert written response to the auditor frpm a third • 
party ("the confirming party"), eitherjn-paperform or by electroriicbt other rhedium (e.g„ through.the 
auditor's direct access to information held by a third party). 

Positive Confirmation Request A request that the confirming party respond difectiy to the auditor by 
providihg the requested information or indicating whethertheconfirmingpartyagreesordisagrees ;: 
with the information in the request- 

Negative Confirmation Request A request that the confirming party respond directly to the.auditorpnly; 
ifthe confirming party disagrees with the information provided in the request 


II. Tailor Objectives/Assertions— The auditor should tailor the confirmations to the specific audit 

objectives/assertions. Confirmations are most useful in addressing the existence/occurrence assertion. 
There are two basic types of confirmation requests: 

A, Positive Confirmation Request— Where a response is requested whether or not the other party 
agrees with the client's recorded amount. A nonresponse is viewed as a "loose end"that must be 
addressed. 

1. When individual accounts are large 

2. Requires second (or possibly third) requests as a follow-up procedure for nonresponses 

3. If no response is obtained, the auditor must perform u/femofiVe procedures. 

B. Negative Confirmation Request— Where a response is only requested in the event of 
disagreement. A nonresponse Is viewed as evidence of agreement by the recipient: 

1. Could easily misinterpret a nonresponse as suggesting agreement when, instead, the other 
party did not even open the envelope! 

2. Therefore, negative confirmations usually require a larger sample size than would positive 
confirmations. 

3. The auditor may justify using negative confirmations when: 

a. The population consists of a large number of small, rather homogeneous items; 

b. The assessed risk of material misstatement is low, and the relevant controls are operating 
effectively; and 

c. Recipients are expected to pay attention to the request, and a low rate of exceptions is 
expected. 
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C. Alternative Procedures—Alternative (sometimes called "alternate") audit procedures are usually 
required when no response Is received for a positive confirmation request: 

1. Receivables—^The auditor would first look to see whether cash was received subsequent to 
the date of the confirmation request. Second best, the auditor would examine the documents 
underlying the apparent validity of the recorded transaction. 

2. Payables—The auditor would usually verify subsequent cash disbursements as evidence of 
payment of the account. 

III. Control of Requests and Responses—The auditor should "maintain control over the confirmation 
requests and responses." If the response is by fax, the auditor should consider a direct call to the 
respondent; and if the response Is verbal, encourage a written reply. 

IV. Responding to Risks of Material Misstatement—AU 330, Performing Audit Pr ocedures in Response 
to Asses sed Risks and Evaluating the Audit Evidence Obtained, states,"Ihe auditor should use externa! 
confirmation procedures for accounts receivable, except when one or more of the following is 
applicable: 

A. The overall account balance Is Immaterial. 

B. External confirmation procedures for accounts receivable would be ineffective. 

C. The auditor's assessed level of risk of material misstatement at the relevant assertion level is low, 
and the other planned substantive procedures address the assessed risk. In many situations, the 
use of external confirmation procedures for accounts receivable and the performance of other 
substantive procedures are necessary to reduce the assessed risk of material misstatement to an 
acceptably low level." 


AU 330 also states, "if the auditor has determli^ that an assessed risk of material misstatement at the 
relevant assertion level Is a significant risk, th^Judltor should perform substahtlve prpceduresSSfS#5 
specifically responsive to that risk," 


_ 
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Example 
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Accounting Estimates _ 

After Studying this lesson, you shou!d be able tcK 

1v Undeiitand auditor's responsibilities to apply a n^-feas^.addit approach to evaluate the 

Standards, 

;2i J<no^^ of"estimation uncertainty"and hpw.that concept may result in a 

''significantrisk" : \.V - ^ ^ 

3, Ktiow the auditor's responsibilities when an accounting estimate results In a "significant risk. 


I. Responsibilities under AlCPA Professional Standards— The relevant AfCPA guidance is provided 
by AU 540, Auditing Accounting Estimg tes. Including Fair Value Accounting Estimates and Reiated 
Disclosures. This pronouncement states that the auditor's objective is to obtain sufficient appropriate 
audit evidence about whether the accounting estimates (including fair value accounting estimates) 
are reasonable and whether the related disclosures are adequate in view of the applicable financial 
reporting framework. 


Definition 

Accounting Estimate: An approximation of a monetary amount in the absence of a precise means of 
measurement 

Auditor's point Estimate (or Auditor's Range}: The amount (or range of amounts) derived from audit 
evidence fof use in evaluating the recorded or disclosed amount(s). 

EstijiFOtion Uncertainty: The susceptibility of an accounting estimate and related disclosures to an , 

mherent lack of precision in its measurement 

Management's PointEstimate:lhe amount selected by management for recognition or disclosure as an 
accounting estimate. 

Outcome of an Accounting Estimate: The actual monetary amount that results from resolution of the 
underlying matter addressed by the accounting estimate. 


II. The Risk-Based Audit Approach 

A. Basis for Risk Assessment— The auditor should obtain an understanding of the following: 

1. The requirements of the applicable financial reporting framework 

2. How management makes the accounting estimates and the data used, including how 
management has assessed the effect of estimation uncertainty 

B. Identifying and Assessing Risks of Material Misstatement- The auditor should evaluate the 
degree of estimation uncertainty involved, and determine whether any of those accounting 
estimates result in significant risks. (Recall that significant risks require the auditor to obtain an 
understanding of whether relevant controls mitigate such risks.) 

C. Responding to the Assessed Risks of Material Misstatement 

1. The auditor should determine whether management has complied with the requirements of 
the applicable financial reporting framework, and whether the methods used to make the 
estimate are appropriate and consistently applied. 

2. In responding to the assessed risks, the auditor should do one (or more) of the following: 

a. Determine whether events occurring up to the date of the auditor's report provide 
evidence about the accounting estimate; 

b. Test how management made the estimate, along with the data used; 
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c. Test the operating effectiveness of applicable controls, along with performing 
appropriate substantive procedures; and/or 

d. Develop a point estimate (or range) to evaluate management's point estimate. 

3. The auditor should consider the need for specialized skills or knowledge. 

D. Further Substantive Procedures to Respond to Significant Risks —The auditor should evaluate 
the following: 

1. How management addressed estimation uncertainty in making the accounting estimate; 

2. Whether management's significant assumptions are reasonable; and 

3. When relevant, whether management has the intent and ability to carry out specific actions. 

E. Evaluating the Reasonableness of the Accounting Estimates —^The auditor should evaluate 
whether the accounting estimates are reasonable (or are misstated) relative to the applicable 
financial reporting framework.The auditor is not responsible for predicting future conditions, 
transactions, or events, however. 

F. Disclosures —^The auditor should obtain sufficient appropriate audit evidence as to whether 
the disclosures meet the requirements of the applicable financial reporting framework. For 
accounting estimates resulting in significant risks, the auditor should evaluate the adequacy of 
thedisclosure of estimation uncertainty. 

G. indicators of Possible Management Bias —^The auditor should consider whether the accounting 
estimates might indicate possible management bias. 

H. Documentation— The auditor should include documentation regarding (1) the basis for the 
auditor's conclusions about the reasonableness of accounting estimates resulting In significant 
risks and their disclosure; and (2) any indications of possible management bias. The auditor usually 
obtains written representations as to whether management believes assumptions used In making 
accounting estimates are reasonable. 

Mi. Additional Guidance Regarding Estimation Uncertainty 

A. Nature of Estimation Uncertainty— The nature of estimation uncertainty varies with the nature 
of the accounting estimate, the extent to which there is an accepted method (or model) to be 
used, and the subjectivity of any assumptions or the degree of judgment involved. The risks of 
material misstatement increase when there is high estimation uncertainty. 

B. Understanding Management's Assessment —In obtaining an understanding of whether and 
how management has assessed estimation uncertainty, the auditor might consider whether 
management has performed a sensitivity analysis and monitors outcomes of prior accounting 
estimates. 

C. When the Estimation Uncertainty is High —The auditor may consider a combination of 
responses to the assessed risks, Including reviewing outcomes, testing how management made 
its estimate, testing applicable controls, and developlng;a point estimate (or range) to evaluate 
management's point estimate. 

D. Narrowing a Range —The auditor's range should encompass all reasonable outcomes, not all 
possible outcomes. A high estimation uncertainty (significant risk) may be indicated if it is not 
possible to narrow the range to less than or equal to performance materiality. 

E. Reporting —When there is significant uncertainty, the auditor may add an emphasis-of-matter 
paragraph to the auditor's report. 
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Miier studying this I •»fSQn, ypu should be able to; 

1. Understand the . udrtort responsjbilities to apply a risk-based audit approc ^ evaluate the 

: reasonableness ( ffair value accouniing estimates in accordance with AfCPA i ?ssional Standards. 

2. Recognize the rc le of "observable inf)uts"and "unobservableinputs Jneval ■' "■ i estimation 
uncertainty for f ir value accounting estimates. 


I, Responsibilities under AiCPA Professional Standards— The relevant 
AlCPA guidance is provided by AU 540, Auditing Accounting Estimates, 

Including Fair Value Accounting Estimates and Related Disclosures. This 
pronouncement states that the auditor's objective is to obtain sufficient 
appropriate audit evidence about whether the accounting estimates 
(including fair value accounting estimates) are reasonable and whether the 
related disclosures are adequate in View of the applicable financial reporting 
framework. 

II. The Risk-Based Audit Approach 

A. Basis for Risk Assessment— The auditor should obtain an 
understanding of the applicable financial reporting requirements, and 
how management makes the fair value accounting estimate (and data 
used), including how management assessed the effect of estimation 
uncertainty. 

B. Identifying and Assessing Risks of Material Misstatement— The auditor should evaluate 
the degree of estimation uncertainty involved and determine whether any of those fair value 
accounting estimates result in significant risks. 

C. Responding to the Assessed Risks of Material Misstatement— The auditor should determine 
whether management complied with the applicable financial reporting requirements, and 
whether the methods used to make the fair value accounting estimate are appropriate and are 
consistently applied.The auditor should consider the need for specialized skills or knowledge. 

D. Further Substantive Procedures to Respond to Significant Risks— The auditor should 
evaluate how management addressed estimation uncertainty: whether management's significant 
assumptions are reasonable; and, when relevant, whether management has the intent and ability 
to carry out specific actions. 

E. Evaluating the Reasonableness of the Estimates— The auditor should evaluate whether the fair 
value accounting estimates are reasonable relative to the requirements of the applicable financial 
reporting framework. 

F. Disclosures—The auditor should obtain sufficient appropriate audit evidence as to whether the 
disclosures meet the requirements of the applicable financial reporting framework. The auditor 
should also evaluate the adequacy of disclosure of the estimation uncertainty for any identified 
significant risks. 

G. Indicators of Possible Management Bias— The auditor should consider whether the fair value 
accounting estimates might indicate possible management bias. 

H. Documentation—The auditor should document the following: 

1. The basis for the auditor's conclusions about the reasonableness of fair value accounting 
estimates resulting in significant risks and their disclosure, and 

2. Any indications of possible management bias. 


Note 
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Fair Value Estimates 



A. Nature of Estimation Uncertainty—High estimation uncertainty results in an increased risk of 
material misstatement when, for example: 

1. Fair value accounting estimates for derivative Instruments are not publicly traded. 

2. Fair value accounting estimates are based on a highly specialized entity-developed model or 
when the assumptions (inputs) cannot be observed in the marketplace. 


"the existence of published price quotations ordinarily is the best audit evidence of fair value." 


B. Examples of Fair Value Accounting Estimates— Complex financial instruments (not traded in 
an open market); share-based payments; property held for disposal; certain assets or liabilities 
acquired in a business combination, including intangibles; and nonmonetary exchange of assets. 

C. For fair value accounting estimates, assumptions (inputs) affect estimation uncertainty and vary as 
follows: 

1. Observable inputs —Assumptionsthat market participants would use in pricing an asset or 
liability based on market data from sources independent of the reporting entity or 

2. Unobservable inputs —An entity's own judgments about what assumptions market 
participants would use. Estimation uncertainty Increases when the fair value estimates are 
based on unobservable inputs. 

D. Testing how Management Makes the Estimate —^The auditor may decide to test how 
management made their estimate (and the data used) when the accounting estimate is a fair 
value accounting estimate using observable and unobservable inputs. 

E. Evaluating the Method of Measurement —Determining whether the method or model used by 
management is appropriate requires professional judgment. 

F. Evaluating the Use of Models for Fair Value Accounting Estimates— Matters the auditor may 
consider in testing the model Include the following: 

1. Whether the model is validated for suitability prior to usage 

2. Whether appropriate controls exist over changes 

3. Whether the model is periodically tested for validity (vyhen inputs are subjective) 

4. Whether adjustments are made to the model's outputs 

5. Whether the model is adequately documented, including key parameters and limitations 

G. Considering Specialized Skills or Knowledge —In considering the need for specialized skills or 
knowledge, the auditor may consider whether any complex calculations or models are involved in 
making fair value accounting estimates when no observable market exists. 

H. indicators of Possible Management Bias —An example of an indicator of possible management 
bias would be the use of an entity's own assumptions for fair value accounting estimates that are 
Inconsistent with observable market conditions. 

I. Communication with Those Charged with Governance— Another SA5 requires the auditor 
to communicate the auditor's views about the qualitative aspects of the entity's significant 
accounting practices, including accounting estimates.The auditor should determine that they are 
informed about the process used by management in developing sensitive accounting estimates, 
as well as the auditor's basis for conclusions about those matters. 
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After studying this lesson, you should be able to: 

1. 'iirx t |)ioi ((.iuu ^ ihc'ciuditoi v'ould perform related to legal liability issuer. 

2. J'df-r'-t.iiid tin dgiet meni h'lwi c n liu AK nui AnuMH .in hdr Association regarding matters 
that can be communicated to the auditor in the "lawyer's letter" In resporisefeV^letteroFfnqulry* 
(with emphasis on "asserted" and "unasserted claims"). 

3. Be familiar with the language used in a typical "letter of inquiry to legal counsel." • , . 


I. Responsibilities under AlCPA Professional Standards— The relevant AlCPA guidance is provided by 
AU 5Q^, Audit Evidence—Specific Considerations for Selected Items. This pronouncement states that the 
auditor's objective is"to obtain sufficient appropriate audit evidence regarding the completeness of 
litigation, claims, and assessments involving the entity"(among other matters specifically addressed 
bytheSAS}. 

il. Audit Procedures Related to Legal Contingencies 

A. Management is the primary source of information about these legal contingencies. The auditor 
should make appropriate inquiries of management. 

B. The auditor should read the minutes of all meetings of those charged with governance where 
significant issues, including matters related to legal liability, affecting the financial statements 
likely would be discussed. 

C. To corroborate management's responses to the auditor's inquiries about the identity of lawyers 
who have rendered significant legal services to the client (and to whom a letter of inquiry should 
be sent)—the auditor should examine the charges to the related expense account and then 
examine (vouch to) the appropriate underlying invoices. 

D. The auditor should draft a /efferofmgu/ry for management to send to those lawyers who have 
rendered litigation-related services to the entity.The lawyer's response to the letter of inquiry is 
simply called the lawyer's letter {or attorney's letter).The primary purpose of the lawyer's letter is to 
corroborate management's responses to the auditor's Inquiries about legal-related contingencies. 
When the entity's in-house counsel has responsibility for such litigation-related matters, the 
auditor should send a similar letter of inquiry to the in-house counsel and obtain a written 
response. 

E. One or more lawyer's letters are expected to be inclucfed in the audit documentation. However, 
the SAS allows for the possibility that the entity may not have any relevant "litigation, claims, or 
assessments" having financial reporting significance. In that case, the auditor would include a 
specific statement of fact in the management representations letter stating that the entity had no 
legal counsel to address current or potential litigatlon,|.ssues. 

III. Inquiries of the Client's Lawyer(s)— The letter of inquiry normally includes the entity's listing 
of various legal matters that the lawyer is handling (classified separately as Asserted Claims and 
Unasserted Claims) to facilitate the lawyer's response. 

IV. Asserted Claims—With respect to asserted claims and active litigation "asserted" means that 
someone has already filed a claim or has at least announced the intention to make such a claim, which 
is synonymous with the AlCPA's term "pending or threatened litigation." According to the American Bar 
Association, the lawyer should inform the auditor directly about any omissions of asserted claims in 
the lawyer's letter responding to the letter of Inquiry. 

V. Unasserted Claims—With respect to unasserted claims and potential litigation, "unasserted" means 
that the entity has exposure to litigation, but no one has yet announced an intention to sue. 

A. The lawyer cannot (according to the American Bar Association's Statement of Policy Regarding 
Lawyers' Responses to Auditors'Requests for Information) inform the auditor directly about any 
omission of unasserted claims as identified in the letter of inquiry. 










Lawyer's Letters 


B. However, lawyers must tell their client about any such omissions and request that client 
management then inform the auditors. 

C. Note that this issue (whether the entity's lawyer has Informed management of any omission of an 
unasserted claim that management should discuss with their auditors} is specifically addressed in 
the management representations letter. 

D. An unasserted claim must be disclosed according to GAAP if the following two conditions exist: 

1. it is probable that a claim will be asserted, and 

2. It is at least reasonably possible that a material unfavorable outcome will occur. 

VI. Scope Limitation— A limitation in the lawyer's response is a scope limitation sufficient to preclude 
an unqualified opinion (a nonresponse would likely result In a disclaimer of opinion owing to a major 
scope limitation). 

VII. Sample Letter of Inquiry to Legal Counsel 


ifiustrative Letter of Inquiry to Legal Counsel 

(Prepared on Client's Letterhead) 

(Dote’) ; : 

{Narne of Lawyer) 

(Address of Lawyer) 

Deaf _: 

In connection with an audit of ourfinanclal statements at {balance-sheetdate) and fonhe {period) 
then ended; management of the Company has prepared, and fu rnished to our auditors (state name 
ahd address of auditors), a description and evaluation of certain contingencies, including those set 
forth below involving matters with respect to which you have been engaged and to which you 
have devoted substantive attention on behalf of the Company In the form of legal consultation or 
representation. These contingencies are regarded by management of the Company as material for this 
purpose.^Your response should Include matters that existed at {balance-sheet date) and during the 
period from that date to the date of your response. ^ ' 



(Ordinarily, the information would include the following: (1) the nature of the litigation; (2) the 
progress of the case to date; (3) how management is responding pr intends to respond to the litigation 
(e.g., to contestthe case vigorously or to seek an out-of-courrsettlement); and (4) an evaluation of the- 
likelihood of an unfavorable outcome and an estimate, ifone can be made, of the amount or range of 
potential loss.) ^ 

Please furnish to our auditors such explanation, If any, that you consider necessary to supplement the 
foregoing information, Including an explanation of those matters as to which your views may differ 
from those stated and an identification of the omission of any pending or threatened litigation, claims, 
and assessments or a statement that the list of such matters Is complete. 
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Unasserted Claims and Assessments {consider^ by management to be probable of assertion, 
and that if asserted, Would have at least a reasbnabie pq^sibiilty of an unfavorable outcome) 

lOMinarily, th&mforrna the fellbwiftg:!!) the nature of the litigation: (2) how 

mariagement intends tarespond if the claim is asserted: and (3) ah evaluation offhe 
uhtatrorablhoutepm an estimate, if one can be madei dftheamountor 

; Pleash^ auditors such explanation, if any, that you.cbhsider necessary to supplement the 

Aforegoing information, including an explanation of those matters as to which your views may differ 
from those stated, . . \ ^ , 

We uhderstand that whenever, in the course of performing legal services for us with respect to a 
matter recognized to involve an unasserted possible claim or assessment that may cal! for financial 
statement disclosure, ifyou have formed a professional conclusion that we should disclose or consider 
disclosure concerning such possible claim or assessment, as a matter of professional responsibility 
to us, you will so advise us and will consult with us concerning the question of such disclosure and 
the applicable requirements of Statement of Financial Accounting Standards No. 5, Please specifically 
confirm to our auditors that our understanding Is correct. 

Please specifically identify the nature of and reasons for any limitation on your response. : 

{The auditor may request the client to inquire about additional matters, for example, unpaid or 
unbilled charges or specified information on certain contractually assumed obligations of the 
company, such as guarantees of indebtedness of others.) 

Very truly yours, 

(Authorized Signature for Clients 


' the sending of this letter should be timed so that the lawyer's response is dated as dose as 
practicabie to the date of the auditor's report. However, the auditor and client should consider early 
mailing of a draft inquiry as a convenience for the lawyer in preparing a timely response to the formal 
letter of inquiry. 

^ Management may indicate a specific materiality limit If an und^stahding has been reached with the 
auditor. ' 

r^lf a client has not needed to retain legal counsel, the auditors may express an unmodified opinion 
on the financial statements even though they have not obtained a letter from legal counse! of 
the Company. In these circumstances, the auditors should obtain.written representation from the 
Company that legal counsel has not been retained for matters concerning business operations that 
jnay involve current or prospective litigation. . ^ 
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I should be able to: 


Understand the audWsTesponsiblir^ll obtain a requiied management represrni i 



accordance with Al^^^ofessiona) S^hdards. Ip 

2. Familiarize yourseif^^lhe language used in a typii management representatit i 


; letter in 


?r. 


I. Responsibilities under AiCPA Professional Standards— The relevant AlCPA guidance is provided by 
AU 580, Written Representations.Jh\s pronouncement states that the auditor's objectives are 

A. "To obtain written representations from management that they believe they have fulfilled their 
responsibility for the preparation and fair presentation of the financial statements and for the 
completeness of information provided to the auditor; 

B. Support other audit evidence relevant to the financial statements by means of written 
representations determined riecessary by the auditor; and 

C. Respond appropriately to written representations provided by management... or if management 
... (does) not provide the written representations requested by the auditor." 

II. Document Verbal Responses to Auditor's inquiries 

A. An auditor is required to obtain written representations from management to corroborate 
management's verbal responses to important Inquiries by the auditor. 

B. This letter from management is addressed directly to the auditors. 

C. The letter should be signed by those members of management with overall responsibility for 
financial and operating matters—ordinarily the chief executive officer (CEO) and the chief financial 
officer (CFO). 

1. Their unwillingness to sign the management representations tetter would be a scope 
limitation probably resulting in a disclaimer of opinion or withdrawal from the engagement. 

2. If any such representations are contradicted by other evidence—the auditor should 
investigate the circumstances and evaluate the implications to reliance on other management 
representations. 

D. The representations letter should cover all periods encompassed by the auditor's report. If 
current management was not present for all periods covered, tailor the representations to the 
circumstances. 

E. Date of the management representations letter—the representations letter should be dated the 
same as the date of the auditor's report. 

III. The Specific Content of the Representations Depend on the Circumstances —Usually include the 
following provisions as applicable. 

A. Regarding the Financial Statements: 

1. That management is responsible forthe fairness of the financial statements 

2. That management is responsible for interna! control over financial reporting 

3. That management is responsible for interna! control to prevent and detect fraud 

4. That significant assumptions used for any accounting estimates are reasonable 

5. That related party transactions have been properly accounted for and disclosed 

6. That subsequent events have been properly accounted for and disclosed 
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7. That any uncorrected misstatements are immaterial 

8. That the effects of litigation and claims have been properly accounted for and disclosed 

B. Regarding the Information Provided: 

1. That all relevant financial records and unrestricted access to personnel were made available to 
the auditor 

2. That ail transactions have been recorded 

3. That management has made available the results of their assessment of fraud risks 

4. That regarding fraud, there is no fraud involving management or employees having 
significant internal control responsibilities, or others where the financial statement effect 
could be material 

5. That management has no knowledge of suspected fraud communicated by employees, 
former employees, or others 

6. That management has disclosed all instances of noncompiiance with laws and regulations 
relevant to financial reporting 

7. That there are no (undisclosed) litigations, claims, and assessments relevant to the financial 
statements 

8 . That management has disclosed all known related party relationships and transactions 

C. Sample Management Representations Letter 


Illustrative Management Representation Letter 
{Prepared on the Entity's Letterhead) 

IJb Auditor) 

(Date) 

This representation letter is provided in connection with your audit of the financial statements of ABC 
Company, which comprise the balance sheet as of December 31,20XX, and the related statements, 
of Incdhle, changes In stockholders'equity, and cash flows for the year then ended, and the related, , 
notes to the financial statements, for the purpose of expressing an opinion on whether the financial 
stafepients are presented fairly, in all material respects, in accord^Ke with accounting principles 
generally accepted in the United States (U.S; GAAP). ; 

Certain representations In this letter are described as b'eliig iirhited to matters that are material. Items 
are considered material, regardless of size, if they involvean omission or misstatement of accpuntihg > 
information that, in the light of surrounding circumstances, makes it probable that the judgment of ^ K 
a reasonable person relying on the Information would be changed or Influenced by the omlssipn pfv: v 
misstatement, , 

Except where otherwise stated below, Immateriaimatters lessthart $[insert amount] cojleCtiyely; -;^^^^ 
are not considered to be exceptions that require di^tosure for the purpose of the following 
representations. This amount is not necessarily indicative of amounts that would require adjustment 
to or disclosure in the financial statements. 


finahdol Statements '■§ 

- We have fulfilled ourfesponsibilities, assetoutln the:terms of the audit engagement dated (insert date), 
fprthe preparation and fair presehtatlori ofthe financial statements in accordance with U.S. GAAP. 

We acknowledge our responsibility for the design, implementation, arid maintenance of internal 
control relevant to the preparation and falrpresentation offinancial statements that are free from 
material misstatement, whether due to fraud or error. 


lA(e corifirm that (fo the best of our knowledge and belief, having made such inquiries as we considered 
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- We acknowledge our responsibility for the design, implementation, and ntaintenance of internal 

control to prevent and detect fraud. - 

- Significant assumptions used by us In making accounting estimates, including those measured at 

fair value, are reasonable. r' 

- Related party relationships and transactions have been appropriately accounted for and disclosed 
in aceordance with the requirements of U.S. GAAP. 

- All events subsequent to the date of the financial statements and for which U.S. GAAP requires 
adjustment or disclosure have been adjusted or disclosed. 

- The effects of uncorrected misstatements are immaterial, both individually and in the aggregate, 
to the financial statements as a whole. A list of the uncorrected misstatements is attached to the 
representation letter. 

- Theeffectsofallknownactualorpossiblelitigationandclaimshavebeenaccountedforand 
disclosed in accordance with U.S. GAAP. 

(Any other matters that the auditor may consider appropriate.) 

Information Provided 

- We have provided you with: 

• Access to all information, of which we are aware that is relevant to the preparation and fair 
presentation of the financial statements such as records, documentation, and other matters; 

• Additional information that you have requested from us for the purpose of the audit; and 

• Unrestricted access to persons within the entity from whom you determined it necessary to 
obtain audit evidence. 

- All transactions have been recorded in the accounting records and are reflected in the financial 
statements. 

- We have disclosed to you the results of our assessment of the risk that the financial statements may 
be materially misstated as a result of fraud. 

- We have (no knowledge of any) {disclosed to you all information that we are aware of regarding) fraud 
or suspected fraud that affects the entity and involves: 

• Management; 

• Employees who have significant roles in internal control; or 

• Others when the fraud could have a material effect pn the financial statements 

\Ne have {no knowledge of any) {disclosed to you all information that we are aware of regarding) 
allegations of fraud, or suspected fraud, affecting the entity's financial statements communicated 
by employees, former employees, analysts, regulators OF others. 

- We have disclosed to you all known instances of noncofhpliante of suspected noncompliance with 
laws and regulations whose effects should be considered when preparing financial statements. 

-We {have disclosed to you all known actual or possible) {are not aware of any pending or threatened) 
litigation, claims, and assessments whose effects should be considered when preparing the 
financial statements [and we have not consulted legal counsel concerning litigation, claims, dr 
assessments]. 

- We have disclosed to you the identity of the entity's related parties and ail the related party 
reiationships and transactions of which we are aware. 

{Any other matters that the auditor may consider necessary.) 

{Name and Signature of Chief Executive Officer with Title) 

{Narhe and Signature of Chief Financial Officer with Title)- ' 



Related- 


After studying this lesson, you should be able to: 

1. Know the d^nition of the term related parties. 

2. Understand the auditor's responsibility to address related-party issues, in accordance with AlCPA 
Professional Standards. 


I, Responsibilities under AlCPA Professional Standards—The relevant AlCPA guidance is provided by 

the clarified SAS, AU-C 550, fie/ofedPorf/es.This pronouncement states that the auditor's objectives are: 

A. To obtain an understanding of related-party relationships and transactions to address fraud risk 
factors and evaluate whether the financial statements achieve fair presentation and 

8. To obtain sufficient appropriate audit evidence about whether related-party relationships and 
transactions are properly accounted for and adecjuately disclosed in the financial statements. 

[|. Definitions 

A. FAS8 definition of relatedparties:Tt\e essence of this definition is that one party has the ability to 
influence the conduct of the other party. 


"Affilite of the enterprise: entities for which investments are accounted for by the equity hi.^thod : 
by the ehterpdse; trusts for the benefit of employees, such as pension and profit-sharing trusts^ 
that are managed by or under the trusteeship of management; principal owners of the ente^^ ,; 

minagement; members of the immediate families of principal owners of the enterprise and' its-; 
:mani|iemeht; and other parties with which the enterprise may deal if one party co^t^l^^^ ean ^ 
significantly InflUeficeithe management dr operating policies of the other to an extent 
transactibg-p be prevented from fully pursuing its own separate interests" 


B. AlCPA definition of arm's-length transaction: 


"A transaction conducted on such terms and conditions between a willing buyer and a willing seller : , 
\yho,are unrelated and are acting independently of each other^d^ursuing their own best interests/' 


IH. The Historical Cost Principle—The historical cost principle in accounting is based on the notion of 
an exchange price negotiated in an arms-length transaction, which results in an accurate measure of 
the value exchanged. However, related parties could potentially set the transaction price at whatever 
value they wish, without regard to the "real" economic value. Auditors are generally not in a position 
to provide reliable, independent appraisals of transactipn prices between related parties. As a result, 
auditors are particularly concerned with the adequacy of disclosure about transactions between 
related parties. 

The Auditor's Responsibilities Under the SAS 

A. Risk Assessment—The auditor should assess the risk of material misstatement that could result 
from the entity's related-party relationships and transactions. The auditor should view any significant 
related-party transactions outside the entity's normal course of business as significant risks. 

^ ” The auditor should inquire of management about 

The identity of the entity's related parties 

b* The nature of the relationships involved 

Whether the entity engaged in any transactions with those related parties during the 
period, and, if so, the purpose of the transactions 
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2. The auditor should also inquire about (and perform other risk assessment procedures) to 
obtain an understanding of the applicable controls established to (a) identify and account 
for such related-party relationships and transactions; (b) authorize and approve significant 
transactions with related parties, as well as those that are outside the normal course of 
business. (The risk of management override of controls is higher when management has 
significant Influence with parties with whom the entity does business.) 

a. Examples of arrangements that may indicate undisclosed related-party relationships 

i. Participation in partnerships with other parties 

ii. Agreements with other parties having conditions outside the norma! course of 
business 

iii. Guarantees involving other parties 

b. Examples of transactions outside the normal course of business 

i. Complex equity transactions (restructurings or acquisitions) 

ii. Transactions with offshore entities 

iii. Sales transactions with unusually large discounts 

iv. Transactions with circular arrangements (such as repurchase agreements) 

c. The auditor should stay alert for any indications of related-party relationships or 
transactions that management has failed to disclose to the auditor. The auditor should be 
attentive to such matters when 

a. Reviewing bank confirmations and other records or documents 

b. Reading the minutes of meetings of those charged with governance 

d. Relevant information about the related parties should be shared with the members of the 
engagement team. 

3. Response to Risk Assessment—The auditor should obtain sufficient appropriate audit 
evidence about the assessed risks of material misstatement due to related-party relationships 
and transactions. 

1. When there is a significant risk about related-party transactions—The auditor may 
perform substantive procedures such as the following: 

a. Confirm specific terms of the transactions withthe related parties 

b. Inspect evidence in the possession of the entity or the related party 

c. Confirm (or discuss) information with Intermediaries, such as banks or others 

d. Review audited financial statements. Income tax returns, or reports issued by 
regulatory agencies to assess the financial condition of the other party 

2. Procedures to obtain an understanding of the business relationships involving a related 
party (and to determine the need for further substantive procedures) include the 
following: 

a. Inquiries of management and those charged with governance 

b. inquiries of the related parties 

c. Inspection of contracts with the related party 

d. Review of employee whistleblowing reports, if available 

e. Background research, perhaps using the Internet 

4. Evaluation—The auditor should evaluate whether the identified related-party relationships 
and transactions have been appropriately accounted for and properly disclosed and whether 
the financial statements achieve fair presentation regarding those related-party relationships 
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and transactions. The substance of the transactions Is normally more important than their 
legal form. 

1. if the auditor Identifies related-party transactions not previously disclosed by 
management— The auditor should; 

a. Communicate relevant Information to members of the engagement team 

b. Ask management to Identify all transactions with the newly identified related party 

c. Inquire about why the entity's controls did not identify the related-party relationship 

d. Perform appropriate substantive audit procedures 

e. Reconsider the risk that there may be other undisclosed related-party relationships 

f. Evaluate whether management's failure to disclose the matter might have been 
intentional 

2. if the auditor identifies significant related-party transactions outside the entity's 
normal course of business —The auditor should determine whether those transactions 
have been appropriately authorized.The auditor should also inspect any underlying 
agreements to evaluate whether the terms are consistent with management's 
explanations or whether the business rationale might suggest fraud. 

5. Communication— The auditor should communicate with those charged with governance 
any significant matters involving the entity's related parties. 

6. Documentation —^The auditor should include in the audit documentation the names of the 
identified related parties and the nature of the related-party relationships and transactions. 

B. Procedures to Identify the Existence of Related Parties 

A. Inquire of management as to the existence of any related-party relationships. 

B. Review prior year's audit documentation for continuing engagements. 

C. Might inquire of the predecessor auditors for a first-year engagement (if applicable). 

D. Review any applicable SEC filings (for public companies) that list related parties. 

E. Review stockholder listings of closely held companies to identify major stockholders. 

C. Procedures to Identify Transactions with the Related Parties 

A. Inquire of management about any such transactions. Review any conflict-of-interest 
statements furnished to the company by management. 

B. Review minutes of board of directors'meetings for mention of significant activities with 
related parties. 

C. Review the accounting records for any large, unusqal, or nonrecurring transactions, especially 
near the end of the reporting period. 

D. Examine underlying documents for unusual or large transactions (such as investment 
transactions) and transactions that have terms or conditions that are inconsistent with 
prevailing market conditions (such as loans with abnormal interest rates or without stated 
maturity dates): 

1. Guarantees of loans (either payable or receivable) might be identified on confirmations of 
such ioans 

2. Transactions with major customers, suppliers, borrowers, or lenders might indicate 
undisclosed relationships 

3. Invoices from law firms might indicate work performed for related parties or related-party 
transactions 
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I. Related Parties 
li. Introduction and Overview 

A. Until 2014, the PCAOB guidance with respect to related-party Issues 
was a now-superseded AlCPA Statement on Auditing Standards 
adopted by the PCAOB on a temporary basis In 2003.The PCAOB 
updated its guidance on related-party relationships and transactions by 
incorporating the PCAOB's risk assessment standards issued in 2010. 

B. Objective— The auditor's objective is "to obtain sufficient appropriate 
audit evidence to determine whether related parties and relationships 
and transactions with related parties have been properly identified, 
accounted for, and disclosed in the financial statements." 

C. Risk Assessment— The auditor should identify and assess the risks of 
material misstatement at the financial statement and assertion levels, 
including the risks of material misstatement associated with related 
parties and transactions with related parties. 

D. Response to Risk Assessment —^The auditor should design and 
implement audit responses addressing the assessed risks of material 
misstatement, including the risks of material misstatement associated 
with related parties and transactions with related parties.. 

III. Perform Risk Assessment Procedures— The auditor should perform procedures to obtain an 
understanding of the nature of the relationships between the company and its related parties, 
including the terms and business purposes of transactions with related parties. 

A. The auditor should obtain an understanding of the company's process for 

1. identifying related parties and transactions with related parties; 

2. Authorizing and approving transactions with related parties; and 

3. Accounting for and disclosing relationships and transactions with related parties in the 
financial statements. 

B. The auditor should make appropriate inquiries of management, others who may be 
knowledgeable about related-party issues, and the audit committee (or chair). 

1. Inquire of management about the following: 

a. The names of the company's related parties, the nature of the relationships, and any 
changes from the prior period; 

b. Background information about the related parties, including location, industry, size, etc.; 


Note 
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c. The transactions Involving related parties during the period, including the terms and 
business purposes of those transactions; and 

d. Any related-party transactions that were not authorized according to the company's 
established policies (including any exceptions that were granted and the reasons). 

2. Inquire of others who may have knowledge of the matters identified above. These may 
include internal auditors, in-house legal counsel, the chief compliance/ethics officer, and the 
human resources director. 

3. Inquire of the audit committee (or Its chair) about the audit committee's understanding of the 
company's relationships, significant related-party transactions, and whether any member of 
the audit committee has any concerns about related-party Issues. 

C. Communication— The auditor should communicate relevant information about related-party 
issues to engagement team members (and, when using the work of other auditors, the auditor 
should communicate relevant information about related-party issues to those other auditors). 

IV. Response to Risk Assessment— The auditor should respond appropriately to the assessed risks of 

material misstatement associated with related parties and transactions with related parties. 

A. For any related-party transactions that are required to be disclosed or that are determined to be a 
significant risk, the auditor should do the following: 

1. Read the underlying documents for consistency with explanations from inquiries and other 
audit evidence about the business purpose; 

2. Determine whether the transaction has been authorized and approved in accordance with 
the company's established policies and whether any exceptions to the company's established 
policies were granted; 

3. Evaluate the financial capability of the related parties with respect to significant 
responsibilities (relevant information might include the audited financial statements of the 
related parties, reports of regulatory agencies, financial publications, and income tax returns if 
available); ond 

4. Perform other procedures as necessary regarding the assessed risks of material 
misstatement. 

B. Intercompany Accounts— The auditor should address the risks of material misstatement 
regarding the company's intercompany accounts. 

V. Evaluation of Financial Statement Treatment— The auditor should evaluate whether the company 

has properly identified its related parties and transactions with related parties. 

A. The auditor should read the minutes of board meetings and evaluate any significant unusual 
transactions, including transactions with executives. 

B. If the auditor believes that previously undisclosed related-party relationships or transactions may 
exist, the auditor should perform procedures (beyond inquiry of management) to determine 
whether those relationships or transactions do exist. 

C. If the auditor determines that previously undisclosed related-party relationships or transactions 
exist, the auditor should do the following; 

1. Inquire of management about the possible existence of other transactions with the related 
party previously undisclosed; 

2. Evaluate why the matter was previously undisclosed to the auditor; 

3. Communicate relevant information to other members of the audit team; 

4. Consider the need to perform additional procedures to Identify other relationships or 
transactions previously undisclosed; 

5. Perform the procedures identified above for transactions with related parties required to be 
disclosed or determined to be a significant risk; and 
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6. Reconsider the auditor's risk assessment: (1) Evaluate the implications to the auditor's 
assessment of internal control; (2) reassess the risk of material misstatement and perform 
additional procedures as necessary; and (3) evaluate the implications for the audit if the 
auditor believes the undisclosed matter indicates that fraud or an illegal act may be involved. 

D. Communications with the Audit Committee 

A. In general, the auditor should communicate the auditor's evaluation of the company's 
identification and financial reporting of related-party relationships and transactions. 

B. The auditor should also communicate other significant matters associated with related-party 
relationships and transactions, such as the following: 

1. Related-party relationships or transactions with parties that were previously undisclosed 
to the auditor 

2. Significant related-party transactions that have not been authorized in accordance with 
the company's established policies or for which exceptions to the company's established 
policies were made 

3. Related-party transactions identified by the auditor that appear to lack an appropriate 
business purpose 

4. Management's assertion included in the financial statements that the terms of a 
related-party transaction were equivalent to that of an arm's-length transaction (and the 
evidence obtained by the auditor that is consistent or inconsistent with that assertion) 

E. indicators of Related Parties and Transactions Undisclosed to the Auditor 

The PCAOB provides examples of information (and sources of information) that may indicate to 
the auditor that related parties or related-party transactions previously undisclosed to the auditor 
might exist. 

A. Examples of Information that may indicate that related parties or transactions with related 
parties previously undisclosed to the auditor might exist 

1. Purchasing or selling at significantly different than market prices 

2. Sales transactions that have unusual terms (e.g., "bill and hold" transactions) or engaging 
in transactions that lack economic substance 

3. Borrowing or lending at significantly different than normal terms 

4. Advancing funds that are used to pay for an otherwise uncollectible receivable 

5. Guarantees outside the normal course of business 

B. Examples of sources of information that may indicate that related parties or transactions 
with related parties previously undisclosed to the auditor might exist: 

1. Filings with the SEC and other regulatory agencies 

2. Confirmation responses and lawyer letters 

3. Internal reports {e.g., reports prepared by the entity's internal auditors and records from 
the company's whistleblower program) 

4. Shareholder registers identifying major shareholders 

5. Contracts and other agreements with management or others involving significant 
unusual transactions 
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After Studying this lesson, you should be aWe to: 

1, Knowwhatismeantbythetermsuijsequentevefltsianddistinguishbetweentfiosethatrequire 

: adjustrnents to the financial statement and those that require disclosure without adjustment. 

2 . Understand the auditing procedures associated with identifying subsequent events issues. .. 

3; Recognize the effect that subsequent events issues may have on dating the auditor's report. ^ 

4. Understand the auditor's responsibilities when subsequently discovered facts become known to 
the auditor before (and after) the report release date. 

5. Understand the predecessor auditor's responsibility when considering the reissuance of the 

auditor's report on prior period financial statements. ; . 


I. Responsibilities under AlCPA Professional Standards— The relevant AlCPA guidance is provided 
by AU 560, Subsequent Events and Subsequently Discovered Facts.This pronouncement states that the 
auditor's objectives are 

A. To obtain sufficient appropriate audit evidence about whether subsequent events are properly 
reflected in the financial statements; 

B. To respond appropriately to subsequently discovered facts; and 

C. For a predecessor auditor who is requested to reissue a previously issued report, to perform 
specified procedures to determine whether the previously issued report is still appropriate. 


Definitions 

Subsequent Events-. Events occurring between the date of the financial statements and the date of the, • 
auditor's report. 

Subsequently Discovered Facts: Facts that become known to the auditor after the date of the auditor's 
report that, had they been known to the auditor at that date, may have caused the auditor to revise 
the auditor's report. 


II. Subsequent Events Requiring Adjustment —Where such an event provides new or better 
information about circumstances in existence as of the balance sheet date. 


Example , 

A lawsuit that could only be estimated at the balance sheet date was settled for a fixed 
amount prior to the issuance of the audit report; with the benefit of this new information^ : 
— there is no need to estimate the financial statement consequences, since the actual 
consequence is now known and can be used to adjust the income statement and balance sheet 




III. Subsequent Events Requiring Disclosure Only— Where disclosure of a materia! event or transaction 
is necessary so that the financial statements will not be misleading, even though the subsequent 
events issue is unrelated to circumstances existing at the balance sheet date. 


Example 

After the balance sheet date, a tornado wiped out the company's facilities and the 
company had no casualty insurance; disclosure would be required to prevent financial 
statement readers from being misled about the entity's circumstances, but adjustment 
would not be required since the financial statement presentation was appropriate at year-end. 
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Subsequent Events and Related Issues 


IV. Audit Procedures Regarding Subsequent Events 

A. Inquire of Management—Include an appropriate reference to such subsequent events in 
the management representations letter.The auditor should also obtain an understanding of 
management's procedures to identify subsequent events, as appropriate. 

B. Review the minutes of meetings of those charged with governance. (Include all meetings up to 
the date of the audit report.) 

C. The lawyer's letter may be relevant to this Issue (regarding legal contingencies). 

D. Scan journals and ledgers subsequent to year-end (through fieldwork) for any unusual items. 

V. Subsequently Discovered Facts Krtown Before the Report Release Date —Subsequently discovered 

facts that became known to the auditor before the report release date 

A. The auditor should discuss the matter with management (and possibly those charged with 
governance) and determine whether the financial statements require revision. If so, the auditor 
should inquire as to how management will address the matter. 

B. If Management Revises the Financial Statements —^The auditor should perform appropriate 
audit procedures on the revision. 

C. If Management Does Not Revise the Financial Statements —If the auditor believes that revision 
is necessary, the auditor should appropriately modify the opinion. 

Vi. Subsequently Discovered Facts Known After the Report Release Date 

A. The auditor should discuss the matter with management (and possibly those charged with 
governance) and determine whether the financial statements require revision. If so, the auditor 
should inquire as to how management will address the matter. 

B. If Management Revises the Financial Statements— The auditor should 

1. Perform appropriate audit procedures on the revision; 

2. Assess whether management's actions are timely and appropriate to ensure that users are 
informed; and 

3. If the opinion on the revised financial statements differs from that previously expressed; add an 
emphasis-of-matter or other matter paragraph (that identifies the date of the previous report, 
the opinion previously expressed, and the reason for the different opinion now expressed). 

C. if Management Does Not Revise the Financial Statements— If the auditor believes that revision 
is necessary, the auditor should determine whether those financial statements have already been 
made available to third parties. 

1. If the financial statements have not been made available to third parties, the auditor should 

notify management and those charged with governance that the financial statements should 
not be made available to third parties before making necessary revisions and a new audit 
report has been provided. ' 

2. If the financial statements have been made available, the auditor should determine whether 
management has taken timely and appropriate steps to ensure that users have been informed 
not to rely on those financial statements. 

3. If management does not take the necessary steps to inform the users, the auditor should 
notify management and those charged with governance that the auditor will try to prevent 
users' reliance on the auditor's report. 

Vil. if a Predecessor Auditor Reissues the Auditor's Report 

A. The predecessor should perform the following procedures to determine whether the previously 
issued auditor's report is still appropriate: 

1. Read the financial statements ofthe subsequent period (and compare those financial 
statements with the ones previously audited and reported on to identify any significant 
changes); 
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2. Inquire of and request written representations from management about any issues, including 
subsequent events, that might affect the previous representations from management; and 

3. Obtain a representation letter from the successor auditor about any known matters affecting 
the financial statements audited by the predecessor. 

B. If a Subsequently Discovered Fact Becomes Known to the Predecessor 

1. The predecessor auditor should discuss the matter with management {and possibly those 
charged with governance) and determine whether the financial statements require revision. If 
so, the auditor should inquire as to how management will address the matter. 

2. If management revises the financial statements and the predecessor auditor plans to issue a 
new auditor's report—the predecessor should: 

a. Perform the procedures necessary to evaluate the revision (and date the audit report 
appropriately or dual-date the report for the revision); 

b. Assess steps taken by management to ensure that users do not rely on the erroneous 
financial statements; and 

c. If the opinion on the revised financial statements differs from that previously expressed, 
add an emphasis-of^matter or other matter paragraph (that identifies the date of the 
previous report, the opinion previously expressed, and the reason for the different 
opinion now expressed). 

VIII.DatIng the Auditor's Report— Applicable to subsequent events, as well as to subsequently 

discovered facts involving the auditor or the predecessor auditor. 

A. Dating the Auditor's Report— The auditor's report should not be dated earlier than the date on 

which the auditor has obtained "sufficient appropriate audit evidence to support the opinion." 

1. Earlier auditing standards used to emphasize the completion of fieldwork as the relevant date 
for the audit report. 

2. Current standards emphasize that the audit report should not be dated before the completion 
of fieldwork, and may be dated later than that. For example, management must take 
responsibility for the financial statement presentation, including footnotes; and the auditor 
must review and evaluate the audit documentation before having sufficient appropriate 
evidence both of which may follow the so-called completion of fieldwork. 

B. Subsequent Events— Dating the auditor's report when a subsequent event occurs after the 

completion of fieldwork but prior to the issuance of the auditor's report 

1. If the financial statements are adjusted without any kcompanying disclosure, the report should 
be dated whenever the auditor has obtained sufficient appropriate audit evidence (which may be 
the completion of fieldwork or later). In this case, there is no need to consider dual dating. 

2. If the financial statements are (a) adjusted along with additional footnote disclosure; or 
(b) disclosure is added without adjustment—the.audit report may be either"dual dated" 
(using one date for the overall audit report and a later date to address a specific subsequent 
event) or the entire audit report may be dated as of the later date (which makes the auditor 
responsible, in general, for all subsequent events up to that later date). 


<il 


Example 

Dual-Dating the Audit Report 

"February 16,20X1, except for Note XY, as to which the4atejs T; 20^" 


C. Subsequently Discovered Facts— If management revised the financial statements 

1. Before the report release date—The auditor should either date the auditor's report as of a later 
date (and extend the audit procedures to the new date and obtain an updated management 
representations letter as of the new date) or dual-date the auditor's report for the revision. 

2. After the report release date (also applicable to a predecessor auditor)—The auditor 
should date the audit report appropriately or dual-date the report for the revision. 





Going Concern Issues 


This lesson addresses the auditor's responsiblfitles under AtGl%PfdfessidhG/|idnddrf 
is substantial doubt about ah entity's includes 

additional audit procedures that may be reK^uired^and Jhesrnj^i^ioiis to the auditor's report when 
substantial doubt abbut ah entity's ability to corhirtUea$;ja^d^g-Cphceth=exi^^^^^^ • •, 

After studying this lesson, you should be able to: 

1. Identify the types of indicatprs that would cause toe auditor to have'•substantiai doubt about an 
entity's ability to continue as a golr^g concern"(and the routine auditprocedures that would likely 

%detect such issues). ; ^ 

2. ^ Describe the additional evidence-gathering responsibilities (and documentation requirements) the 

auditor has when substantial doubt about toe entity's ability to continue as a going concern ©(ists. 

3. Understand the audit reporting implications of going concern issubs, : 


I. Responsibilities Under AlCPA Professional Standards —The relevant AlCPA guidance is provided 

by AU-C 570, The Auditor's Consideration of an Entity's Ability to Continue as a Going Concern. This 
pronouncement identifies the following audit objectives: 

A. To obtain sufficient appropriate audit evidence whether management's use of the going concern 
basis of accounting is appropriate when used in the preparation of the financial statements; 

B. To conclude whether substantial doubt about an entity's ability to continue as a going concern for 
a reasonable period of time exists; 

C. To evaluate the possible financial statement effects (including disclosure) regarding the entity's 
ability to continue as a going concern for a reasonable period of time; and 

D. To report appropriately in accordance with this SAS. 



Pefirtition : 

Reasonable PenoddfTime: "The period of time required by the applicable financial reporting 
framework or, if po such requirement exists, within one year after the date that the financial 
statoiftents are issued (otwithin one year after the date that the financial statements are available to 
bejssued,wh&n applicable)" 


il. Management's Responsibility for the Evaluation of Going Concern Issues 

A. FASB requires management to evaluate whether substantial doubt exists within oneyear of the 
issuance of the financial statements; GASB has a similar requirement for governmental entities. 

B. Financial statements are prepared using the "going concern basisof accounting" unless the 
"liquidation basis of accounting" is appropriate, 

III. Auditor Requirements 

A. Perform Risk Assessment Procedures —Should consider whether conditions or events exist that 
raise substantial doubt; should determine whether management has performed an evaluation of 
any such conditions or events. 

1. If management has made an evaluation —Should discuss the evaluation with management 
and obtain an understanding of management's plans to mitigate the effects of conditions or 
events causing substantial doubt. 

2. If management has not made an evaluation —Should discuss management's intended use of 
the going concern basis of accounting and Inquire whether management may have substantial 
doubt about the entity's ability to continue as a going concern for a reasonable time. 
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B. Auditor's Evaluation of Management's Evaluation and Supporting Analysis 


1. Should consider ail relevant information known to the auditor; and should consider the same 
period that management used in its evaluation. 

2. Period beyond management's evaluation —Should inquire of management about any 
conditions or events after the period of management's evaluation that may be relevant to the 
entity's ability to continue as a going concern. 

3. When conditions or events are identified that raise substantial 
doubt— -Should perform additional audit procedures, including 
consideration of any mitigating factors 

a. Request that management make an evaluation If they have not 
already done so. 

b. Evaluate whether management's plan as to whether It is 
probable that the plans can be implemented and would 
effectively mitigate the conditions or events that raise the 
going concern issue. 

c. When financial support by "supporting parties" (either 
third parties or the entity's owner-manager) are Important 
to management's plans —Should obtain sufficient 
appropriate audit evidence (specifically, in writing) about 
the supporting parties' intent and ability of those parties to 
provide the necessary support. 

d. When the analysis of the entity's cash flow forecast is 
significant to management's plans—Should evaluate the 

reliability of the underlying data and the adequacy of the 
support for the underlying assumptions. 


Note 

The intern of the 
supporting parties may be 
established by obtaining 
from management the 
"support letter" from 
the supporting party 
or by confirming the 
commitment directly with 
the supponing parties. 

1 he auditor should 
consider the legality 
and enforceability of the 
commitments^Ability may 
be established by evidence 
of past support given, 
along with evidenceofthe 
solvency of the supporting 
party (e.g» reviewing 
bank statements or the 
valuation of assets held by 
the supporting party). 


4. Procedures to identify conditions or events that raise going concern issues 

a. Audit procedures routinely performed In any audit engagement are normally 
sufficient to identify relevant conditions or events— Need not design specific 
procedures to identify the conditions or events that would raise substantial doubt. 

b. These procedures include performing substantive analytical procedures, reviewing for 
subsequent events, reviewing the entity's compliance with requirements of its debt 
agreements {regarding breach of contract matters that could accelerate the due date 
of the debt), reading the minutes of meetings .of those charged with governance, and 
sending a letter of inquiry to the entity's attorney(s) to request a lawyer's letter regarding 
litigation issues. 

c. When conditions or events raise substantial doubt —There may be a need for 
additional audit procedures (e.g., analyzirig apd discussing the entity's latest interim 
financial statements or relevant forecasts, determining the adequacy of support for 
planned disposals of assets, etc.). 


5. Going concern issues might be indicated by the following circumstances: 

a. Negative financial trends— Recurring operating losses, negative cash flow from 
operations, adverse financial rations, etc. 

b. Other indications —Already in default, entity Is denied usual trade credit, cash dividends 
are in arrears, the entity is selling pieces its business, etc. 


c. Internal matters—Facing work stoppages, dependence on a particular project or 
customer, etc. 

d. External matters—Uninsured casualty losses, significant litigation, changing 
technology, etc. 
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C. Written Representations—Should request written representations from management (1} about 
management's plans intended to mitigate the relevant conditions or events, and (2) whether 
disclosure of alt relevant matters is appropriate (Including the conditions or events involved and 
management's plans). 

D. Auditor Conciusions—The auditor should reach a conclusion about the following: 

1. Use of the going concern basis of accounting —Should conclude on the appropriateness 
of management's use of the going concern basis of accounting in the preparation of the 
financial statements. 

2. Substantial doubt —Should conclude on whether there are conditions or events that raise 
substantial doubt about the entity's ability to continue as a going concern for a reasonable 
period of time. 

3. Adequacy of disclosure —Should conclude whether disclosure is adequate (whether or not 
substantial doubt has been alleviated by management's plans). 

E. Communication with Those Charged with Governance —Should include the following in such 
communication: 

1. Whether there are conditions or events that constitute substantia! doubt for a reasonable 
period of time; 

2. Auditor's consideration of management's plans; 

3. Whether management's use of the going concern basis of accounting in its financial 
statements is appropriate; 

4. The adequacy of disclosures in the financial statements; and 

5. The implications of these going concern issues for the auditor's report. 

F. Audit Documentation— Should document the following: 

1. The conditions or events causing the auditor to have substantial doubt for a reasonable 
period of time; 

2. Elements of management's plans considered to be significant in mitigating those conditions 
or events; 

3. Audit procedures performed (and results obtained) to evaluate the significant elements of 

management's plans; , ‘ 

4. Auditor's conclusion as to whether the substantial doubt remains or is alleviated and the 
evaluation of the adequacy of related disclosures; and 

5. Auditor's conclusion with respect to the effects on the auditor's report. 

G. Implications of Going Concern Issues for the Auditor's Report 

1. When the use of the going concern basis of accounting is inappropriate —Should express 
an adverse opinion when liquidation is imminent and management's use of the going 
concern basis of accounting in inappropriate. 

2. If disclosure is inadequate —Should either express a qualified or adverse opinion, as 
appropriate. 

3. If the auditor is unable to obtain sufficient appropriate audit evidence—Should either 
express a qualified opinion or disclaimer of opinion, as appropriate. 

4. When there is substantial doubt about the entity's ability to continue as a going concern 
(but the use of the going concern basis of accounting is appropriate) — Should include an 
"emphasis-of-matter" paragraph (after the opinion paragraph) in the auditor's report. 

5. Prohibited the inappropriate use of conditional language —The SAS prohibits using 
"conditional language" in expressing a conclusion about the existence of substantial doubt; 
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Emphasis of Matter Regarding Going Concern 

The accompanying financial statements have been preparedj^suming that th^^mpany will continue as 
a going concern. As discu 5 sed| in Note X to the financial sta^ents, the Comi^fcas suffered recurring 
losses from operations, has a het capital deficiency, and ha^^ted that subst^^g doubt exists about the 
Company's ability to continue;as a going concern. Manager^^t's evaluation events and conditions 
and management's plans regarding these matters are also <^^nbed in Note st^fdtnenKr 


do not include any adjustments that mig 

nrtt mrtHifioH u/ith rocnprt trt tihi< mattpr. 


Our opinion is 


Note 

The following emphasis-of-matter 
(2) management's plans do not allevi 
'Stahdafis'tbIriSddera'hbte'tpfB 


jplicaWe when (1) dieaudltor'^ncludes that substantial doubt exists; 
tantial doub^ and (3) the ent^ is required by applicable (FASB) reporting 
^ents that substantial doubt egsts: 


for example, the SAS offered the following as inappropriate: "The Company has been unable 
to renegotiate its expiring credit agreements. Unless the Company is able to obtain financial 
support, there is substantial doubt about Its ability to continue as a going concern." 


Performing Further Procedures and Obtaining Evidence 
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Areas 


Introduction to Auditing Individual 



After studying this lesson, you should be able to: 

1. M'rit.f^ iIk' luui .1 >(>iuoiis foi (Kcouiit biiLiiKc , it the end of the period i'^ ro<id audit objectives 
o..\A r«ibu t**) iMicuu u-sho('t line iic iiu foi v^hich the auditor must gather r'v i 'i nee as a basis for 

evaluation. ' * ' ' ' ' ' --c ' '.v 

2. Identify certain audit procedures that are generally applicable to each of these assertions and other 
audit procedures that are generally applicable to every individual audit area. 


1. Audit Procedures Generally Applicable to the Four Assertions for Account Balances —Note 
that these assertions represent broad audit objectives for\A/hich the auditor must gather evidence 
to determine whether the financial statement elements are fairly presented in accordance with the 
applicable accounting framework (e.g., GAAP). 

A. Existence— Related to the validity of recorded items. 

1. Confirmation —(Especially when concerned about overstatements.) For example, cash, 
accounts receivable, inventory held by others, and investments held by others. 

2. Observation —Especially for Inventory or investment securities held by the entity. 

3. Agree (vouch) to underlying documents— Agree items from the accounting records to 
the supporting source documents to evaluate the appropriateness of recorded items: for 
example, as an alternate procedure for accounts receivable; to verify additions to property, 
plant, and equipment accounts; and for various liabilities, such as notes payable. 

B. Completeness —Related to omissions of amounts that should have been recorded. 

1. Cutoff tests —Trace from supporting source documents back to the accounting records 
looking for omissions. For example, trace from shipping documents to cost of goods sold or to 
the sales journal, or perform a "search for unrecorded liabilities." 

2. Analytical procedures —These are applicable to every,audit area, but be specific: calculate a 
particular ratio or compare something specific to another specific thing! 

C. Rights and Obligations —Related to any restrictions to the entity's rights to their assets or to the 

obligations for their liabilities. 

1. Inquire of applicable client personnel— Inquire about compensating balances with banks, 
the use of specific assets as collateral for debts, review.debt agreements for collateral, etc.; 
the management representation letter shouid document these inquiries regarding important 
matters. 

2. Examine authorization of transactions —to ascertain whether any unusual conditions apply. 

D. Valuation and Allocation —Related to the appropriateness of dollar measurements. 

1. Recalculate account balances —(Verify the client's calculations), for example, for 
depreciation expense and prepaid insurance. 

2. Trace to subsequent cash receipts or disbursements —Includes tracing to cash receipts or 
cash disbursements journal and to the applicable bank statement. 

3. Analytical procedures—review the aged trial balance for accounts receivable to evaluate 
the apparent reasonableness of the allowance for uncollectibles. (In connection with such 
analytical procedures, the auditor may also inspect underlying sales invoices or shipping 
documents to test the accuracy of the entity's data underlying the analytical procedures.) 
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4. Examine published price quotations for fair value measurements, when applicable— 

Verify mathematical accuracy. Verify that the supporting ledgers or other accounting 
records agree to the reported balance per the general ledger before performing other audit 
procedures on those supporting accounting records for purposes of reaching a conclusion 
about the fairness of the general ledger account balance involved. Foot and cross-foot the 
underlying records to verify that they, in fact, add up. 


A. Consider the Implications of Internal Control— Remember the acronym "SCARE" [for 
"segregation of duties, controls (as in physical controls), authorization, reviews (as in performance 
reviews}, and EDP (for information processing)]"discussed in the"lnternal Control Concepts and 
Standards" section") to identify control activities of interest to the auditor relevant to planning the 
nature, timing, and extent of substantive procedures that underlie detection risk, based on the 
assessed level of control risk. 

B. Substantive Procedures usually Performed In Every Individual Audit Area 

1. Agree the financial statement elements (or the trial balance from which the financial 
statement elements are derived) to the underlying accounting records (i.e., to the general 
ledger). 

2. Scan the entity's journals and ledgers for any unusual Items. 

3. Make appropriate inquiries of management and other personnel (and document those 
important inquiries and management's responses in the management representations letter). 

4. Perform specific analytical procedures—consider historical trends and events within the 
industry. 
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Cash 


After Studying this lesson, you should be able to: - - 

1v{ Veri^ of the Itemsbn an entity's bank reconciijatiGn, supporting the 

entity's reported cash balance. 

2,; Bbfamilla^^ bank confirmatibh form. 

linderstariti^w^^ meant by the term./c/f/ng and how the auditor might address this issue. 


I. Review the Client's Bank Reconciliation for Each Cash Account 

A. Request a cutoff bank statement approximately 10 days after year-end, to test the reconciling 
items on the year-end bank reconciliation. (This request must come from management to the 
entity's financial institution to provide information directly to the entity's auditors.) 

1. Deposits in-transit —Verify that items listed as deposits In transit on the bank reconciliation 
have been processed as deposits on the cutoff bank statement (testing for existence/ 
occurrence regarding the validity of those reconciling items); these should appear in 
chronological order on the cutoff bank statement. 

2. Outstanding checks— Look for checks processed with the cutoff bank statement and 
having a date prior to year-end; trace those items to the client's list of outstanding checks for 
completeness. (Note that checks outstanding at year-end will not necessarily clear the bank in 
order or within the period encompassed by the cutoff bank statement.) 

B. Confirm directly with the bank the balance according to the bank statement (usually confirm two 
separate bank-related matters; (1) cash balances with emphasis on the existence assertion; and 
(2) liabilities to the bank with emphasis on the completeness assertion)—Note that such evidence 
obtained from independent sources outside the client organization is viewed as very reliable evidence. 


Sample Bank Reconciliation As of 12/31/XI : 


Balance per bank 12/31/XI 

$X’ 

Add: Deposits in transit 

X"- r"' • ' \ C/K 

Less; Outstanding checks 


Adjustedbalahceasof 12/31/Xl ; 

rr/ 

i Balance per bool«@ 12/31/Xl 

\ ^ 

Add: Credits directly by bank (e,g., interest) 


Less: Charges by bank (service charges, etc:) 



sx 

: 'Confirmed as of 12/31/Xl... (A-3). 


^ Agreed to bank cutoff statement (A-4). . 


^ Reviewed canceled checks (dated December or earlier and processed in January) returned with bank 
; cutoff statement {A-4); no omissions from the outstanding check listing were noted. 

“^ Agreed to Gdrieral Ledger as of 12/31/X1. : . 


^ Agreed to client's December bank statement 
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Standard Form to ConSrm Account 
Balance information with Fiiianciai institutions 


Customer Name 


W© have provided to out accountants the following information as of Uie: ■ ■ ■ 
close of buaness o h 20 , . regarding our deposit and loan;: , 

balarM>es. Please confirm the accuracy of the information, noting any excep-, 
firms to the information provided. If the balances have been left hlank, 
please complete this from by furnishing the balance in the appropriate space 
below.* Although we do not request nor expect you to conduct a comprehen¬ 
sive, detailed search of your records, If during the process of comleting this 
confirmation additional information about other deposit and loan accounte 
we may have with you comes to your attention, please include siich informa¬ 
tion below. Please use the enclosed envelop© to return the form dtrfectiy to > 
our accountants. ' 


Financial 
Institution’s 
Name and 
Address 


1. At the close of business on the date listed above, pur records indicated the following deposit balance(s); 


Interest Rate 


Account No 


Account Name 


2. We were directly liable to the financial institution for loans at the close of business on the date listed above as follows: 


Customer’s Authorized Signature Date 

The information presented above by the customer is in agreement wiUi our records. Although we have not conducted a compre¬ 
hensive, detailed search of our records, no other deposit or loan accounts have come to our attention except as noted below. . 


Financial Institution Authorized Signature / Title 


Exceptions and/or comments 


Please return this form cfitectly to our accountants: ^ 

'Ordinarily, balances are intentionally left blank if they ^ 

are not available atthe time the form is prepared, j; : : ] 

Approved 1990 by American Bankers Assodation, toeiitan JnsIHulepf CertifiedT^bllcAccountanls. arrd Bank Administration Institute. 
Mdltional forriis available from: A1GPA - Order Department, P.O. Bw 1W)3,WY, NY 10108-1003 


0451-5951 


Account 

No./Descriptlon 

Balance 

Due Date 

Interest 

Rate 

Date through which 
interest is paid 

Description of Collater£ti 

1 ____ 


II. Multiple Checking Accounts with Transfers Among Them 

A. Prepare a schedule of interbank {or intercompany) transfers to verify that both sides of the transfer 
are properly accounted for (i.e., verify that the cash receipts journal and the cash disbursements 
journal both reflect the transfer in the same proper period) and to detect any kiting. 

B. Kiting is an overstatement of the true cash balance at year-end caused by recording the receipt, 
while failing to record the disbursement, associated with a transfer between cash accounts. (Note 
that recording the disbursement, while falling to record the receipt part of a transfer between cash 
accounts would result in a misstatement—however, it would be an understatement of the cash 















Cash 


balance and, therefore, would be Inconsistent with kiting, which results 
specifically in an overstatement.) 

If Fraud (Misappropriation) Is Suspected—The auditor may prepare a 
proof of cash. This compares the beginning balance per the bank plus 
deposits minus checks clearing the bank versus the beginning balance per 
the books plus receipts minus disbursements according to the books. 

Petty Cash—May count cash on hand at the client's request. {If the auditor 
chooses to perform any specific audit procedures for an immaterial account, 
such as petty cash, analytical procedures are usually sufficient, such as 
simply comparing the current year's general ledger balance to the prior 
year's general ledger balance.) 

inquire of Management—About any restrictions on cash balances, if 
there is a minimum balance requirement for cash, then that restriction 
should be disclosed. 


Note 

The mar^agement 
representations letter 
usually addresses any 
compensating balances 
(minimum balance 
requirements) that 
constitute a restriction 
on 5pei)ddble cash. (Tire 
usual management 
representations comment 
that addresses all general 
restrictions on the entity's 
rights to its assets is: 'The 
company has satisfactory 
title to all owned assets, - 
and there are no hens 
or encumbrances on 
such assets nor has any 
asset been pledged as 
collateral.") 
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Accoynts 


Recognize that 
framework for p] 

Know how to id 
assertions whe 



I. Recall the four assertions that Professional Standards identify for account balances at the end of the 
period: (1) existence; (2) completeness; (3) rights and obligations; and (4) valuation and allocation. 

A. Related to the Existence/Occurrence Assertion— Confirm selected individual customers' 
accounts. 

B. Verify that the subsidiary A/R ledger agrees or reconciles with the A/R general ledger balance: 

1, Recall that the accounting records constitute one category of evidence. The second category 
is other information according to SAS No. 106 and Is covered in the review module on Audit 
Evidence. 

2. It is important to establish the logical connection between the detailed accounting records 
being used for the audit procedure (In this case, the subsidiary ledger of individual customer 
accounts) and that which is the object of the auditor's intended conclusions (specifically, the 
general ledger balance for A/R). 

C. Confirm all accounts that are determined to be individually material and confirm selected other 
accounts on a test basis. 

1 . Positive confirmations— Request a response whether the individual customer agrees 
or disagrees with the stated balance. A nonresponse indicates a situation that should be 
followed up by the auditor. 

2. Negative confirmations— Request a response only if the individual customer disagrees with 
the stated balance. 

a. A nonresponse Is taken as evidence supporting the client's representation. 

b. The risk is that the recipient of the request mi§ht have thrown it away without even 

verifying the balance owed. . 

c. Accordingly, negative confirmations are usually used only for rather small balances under 
conditions of effective Internal control (i.e., low control risk). 

D. Investigate All Exceptions (Disagreements) Received— Determine whether the client's records 
are accurate and, if not, whether the financial statemehts are materially misstated. 

E. If no response is received to a positive confirmation request, the auditor should send a second 
confirmation request, and perform alternate procedures if still no response is received. 

1. Subsequent cash receipts (the preferred alternate procedure)— Trace collections on the 
account subsequent to the date of the confirmation to the cash receipts Journal and to the 
bank statement (suggests the balance was valid if It was subsequently collected). 

2. Vouch to (inspect) the underlying documents (the last resort if the account has not been 
collected)—Examine the documents (customer's purchase order, client's sales invoice, and 
shipping documents) supporting the validity (occurrence) of the transactions comprising the 
account balance. 

11. Related to the Valuation Assertion—Evaluate the reasonableness of management's estimates of 
ailowonce for uncollectibles and the allowance for sales returns. 
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Accounts Receivable 


A. Note that confirmations may contribute, in part, to the auditor’s conclusions about the fairness of 
the dollar valuation; however, that contribution relates to establishing the reasonableness of the 
gross A/Rand additional procedures are required to assess the net realizable value of the A/R. 

B. Review the Client's Aged Trial Balance of Accounts Receivable 

1. inquire about any large, delinquent items. 

2. Estimate the percentage of uncollectible accounts within each category of age (based on 
prior year's working papers tempered by current economic conditions). 

C. Review receivers (documents used by the entity's receiving department to capture 
deliveries) after year-end for sales returns; consider prior years'returns in view of current 
economic conditions. 

D. Review adjusting Journal entries (e.g. write-offs) for appropriate authorization. 

III. Related to the Completeness Assertion 

A. Perform a cutoff test of sales. Examine the shipping documents for the last few shipments before 
year-end and the first few shipments after year-end; compare these shipping documents with the 
related sales invoices to assess whether the sales were recorded in the appropriate period. 

B. Compare these shipping documents around the end of the period with 
the related sales invoices (related to the sales journal) to assess whether 
the sales were recorded in the appropriate period. 

C. Proper cutoff involves two assertions (existence/occurrence and 
completeness). Usually the auditor performs certain specific audit 
procedures directed at testing the validity of recorded transactions (i.e., 
existence/occurrence) but completeness is primarily addressed by these 
cutoff procedures (along with applicable analytical procedures). 

!V. Related to the Rights and Obligations Assertion —Inquire of 

management: 

A. About receivables pledged as collateral for debts (and review loan 
agreements to identify such collateral) 

B. About shipments on consignment that are not actual sales 

C. About any receivables due from employees or management that should 
be classified separately from ordinary trade receivables ' 

D. Document such inquiries (and management's response) in the 

management representations letter. . ' 


Note 

Lapping is'ph ' 

cover up a theft of receipts, 
where axlerkrnlgh^^^^^^^ 

■to apply a later receipt 
. to the prior customer's 
accpgnt:^hgspgn)ijhtliM 

uncp/tecf/We; 

mlsappr^pHiatli^ of.. 
.assets) thatls associated 

segregation of duties 
whereby someone with ' 
access to tHeCusfbmeri . 
payment qlsohasthe . 
authority to make entries ':;; 
In the accounting records -^' 
to cover up the theft. 
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inventory _ 

After studying this lesson, youshould 

1. Recognize that the four assertions for account balances at|^eehcj;bfilbe: a 

framework for preparing an audit plan to evaluate the fairness of inventory 

2. Identify appropriate substantive auditprocedums^^ldre^spacbpfjh^^ 
auditing inventory, 


Recall the four assertions that that Professional Standards identify for aqcpunt balances at the end of 
the period; (1) existence; (2) completeness; (3) rights and obligations; and (4yvaluatiori and allocation. 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 501, Audit Evidence- 

Specific Considerations for Selected Items. Part of this standard focuses specifically on inventory, which 
is summarized here. The standard states that the auditor's objective is to obtain sufficient appropriate 
audit evidence about the existence and condition of inventory. 

ti. Related to the Existence Assertion— The auditor participates in the client's physical count of 
inventory (the observation of inventory): 

A. Note— The client counts the entire inventory and the auditor observes the client's taking of the 
inventory (while taking independent rest counts). The auditor participates in this process for two 
primary reasons, referred to as dual purpose tests. 

1. Internal control objectives— The auditor should study the client's written procedures and 
instructions given to the employees or others counting the inventory to assess the adequacy 
of the design of these procedures in achieving an accurate physical count; the auditor's focus 
here is assessing control risk related to inventory reporting. 

2. Substantive audit objectives— The auditor should take a sample of inventory items and 
verify the physical existence of quantities reflected in the client's detailed records supporting 
the ending inventory; the auditor's focus here Is assessing the fairness of the reported 
inventory. 


Recall that the d/mct/on of the test is critical to the inference Associated with an audit procedure: 

totest existence for inventory— The auditor should s^ctTtems from the client's (final) inventory 
listing, which is essentially the subsidiary ledger for>^ adjusted general ledger balance.The auditor 
should agree those selected items to the underlying inventory count tags (and the auditor's own 
countsheets) that serve as source documents. 

To test completeness for inventory— The direction 6f the test is just the opposite. The auditor should 
select items from the underlying, inventory count tags:(liiduding the auditor's dwti count sheets) and . 
agree those to the client's inventory iisting td establish that there were.no omissioris frprri the client's 
inventory listing. .-V' '” 


B. Related to Audit Procedures—Emphasizing quantities: 

1. Auditor's attendance at physical inventory counting— Involves (a) inspecting the inventory 
to ascertain its existence and evaluate its condition (and performing test counts); (b) 
observing compliance with management's instructions and the performance of procedures 
for recording and controlling the results of the physical count; and (c) obtaining audit 
evidence about the reliability of management's count procedures 

2. Review the client's written inventory-taking procedures to determine that the physical 
count will be complete and accurate {regarding dates, locations, personnel involved, and 
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instructions about accounting for the prenumbered inventory tags, cutoff procedures, and 
error resolution procedures) 

3. Assessing the accuracy of the client's reported inventory quantities. The auditor should 
perform test counts for a sample of the prenumbered inventory tags, trace these counts into 
the client's count sheets (to verify the accuracy of the client's counts on a test basis) and to the 
client's final inventory listing that supports the general ledger balance. Note that the entity's 
final inventory listing (reflecting both quantities and dollar amounts) serves as the"subsidiary 
ledger" for inventory and represents thedollaramountfor inventory to which the general 
ledger account will be adjusted. 

4. Focus on the client's prenumbered inventory tags. Determine that all tags have been properly 
accounted for (i.e., ail tags are used, unused and returned, or have been voided and returned 
to a responsible official). 

5. The auditor should be alert for and inquire about obsolete or damaged items (e.g., dusty 
or damaged cartons) related to the valuation assertion; the auditor should also be alert for 
empty containers or hollow spaces. 

C. If the physical count of inventory occurs on a date other than the date of the financial statements, 
the auditor should perform audit procedures to determine whether changes in inventory between 
those dates are properly recorded. 

D. If the auditor is unable to attend physical inventory counting due to unforeseen circumstances, 
the auditor should make some physical counts on an alternative date and perform audit 
procedures on intervening transactions. 

E. If attendance at physical inventory counting Is impracticable, the auditor should perform 
alternative audit procedures to obtain sufficient appropriate audit evidence regarding the 
existence and condition of inventory. If that is not possible, then the auditor should appropriately 
modify the auditor's opinion. 

F. If there is a material amountof inventory stored in a public warehouse, the auditor can confirm 
such inventory with the custodian (or could consider physical observation). 

III. Related to the Valuation Assertion 

A. Price Tests —Regarding the unit costs (not selling prices!) attributed to inventory items: 

1 . Affected by the client's inventory methods (perpetual versus periodic inventory system) and 
cost flow assumptions (LIFO, FIFO, average) 

2. For merchandising (nonmanufacturing) inventory—Examine the appropriate underlying 
invoices 

3. For manufactured inventory—Revlew the supporting job order cost records (or the process 
cost worksheets) and test to underlying documents. 

B. Test Extensions— Recalculate the product of quantity times cost/unit for selected items: 

1. Add up theseextensions to verify that the iterns tested are reflected in the total of the 
detailed inventory listing supporting the client's general ledger balance.This can be described 
as "verifying the mathematical accuracy" to establish the connection between the general 
ledger balance and the supporting detailed listing; 

2. Scan the detailed inventory listing for any unusual items; 

3. Review the client's reconciliation (or the adjusting journal entry) of the general ledger balance 
to the detailed inventory listing. 

C. Lower of Cost or Market Considerations —Inquire of management as to the existence of any 
damaged, obsolete, or excess inventory items that might require a write-down from historical 
cost to net realizable value; be attentive to these issues when participating in the observation of 
inventory. 
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Performing Further Procedures and Obtaining Evidence 


IV. Related to the Completeness Assertion—Procedures that might identify material omissions of 

inventory: 

A. Test inventory cutoff (recall "FOB-shipping point" versus "FOB-destination" as a technical issue 
determining when title to goods is transferred): 

1. Related to increases in inventory —Revie\w"recelvers" (receiving documents used by the 
entity's receiving department to capture deliveries) for a few days before and after year-end 
(part of"purchases" cutoff test); 

2. Related to decreases to inventory —Review shipping documents for a few days before and 
after year-end (related to"sales”and, hence, "cost of goods sold" cutoff test). 

B. Analytical Procedures (Perhaps by Location or by Product-Line) —Compare the current year to 
the prior year and inquire about any significant differences in: 

1. Gross profit rates 

2. Inventory turnover (primarily applicable to the valuation assertion regarding slow-moving 
inventory) 

3. Shrinkage rates 

4. Total inventory 

V. Related to the Rights and Obligations Assertion 

A, Inquire of management about any inventory that might be held on consignment or pledged as 
collateral for borrowings (and review loan agreements to identify such collateral). 

B. Document such inquiries (and management's response) in the management representations 
letter. 

VI. Other issues Related to Auditing Inventory 

A. Use of Specialists —An auditor may need to engage an outside expert if the determination of 
quantities and/or quality Is too complex (e.g., electronics, precious jewels). 

B. If an auditor is unable to verify the beginning inventory for a first-year audit, but is able to verify 
the ending inventory: 

1. The auditor may render an opinion on the balance sheet and disclaim an opinion on the 
income statement, statement of retained earnings, and the statement of cash flows (due to 
the inability to verify cost of goods sold and, hence, net income). 

2. It may be possible to establish the reasonableness of a new client's beginning inventory 
from alternate procedures—through the use of analytical procedures or by reviewing a 
predecessor auditor's working papers. 
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After stud^iig this lesson, you shouldable t o: 

1. Understand the auditor's responsibilities, under AlCPA-Professional Standards, Wl ■ >. 

Investments {including derivative instrument, and hedging activities) 

2. Recognize that the four assertions for accouni balances at the end Of the period represi 
framework for preparing an audit plan to evaluaK- the feimess of Jrwestments. 


3. identify appropriate substantive au 
auditing investments ^ ^ 


foceduii's to address each of those .I'f^-itions v • 




i. Relevant AlCPA Guidance —^The relevant AlCPA guidance Is provided by 
AU 501, Audit Evidence—Specific Considerations for Selected Items. Part of 
this standard focuses specifically on Investments in securities and derivative 
instruments, which is summarized here.The standard states that the 
auditor's objective is to obtain sufficient appropriate audit evidence about 
the valuation of investments in securities and derivative instruments. 

IL Auditing Investments in Securities —Including derivatives, measured at 
fair value 

A. The auditor should determine whetherthe applicable financial 
reporting framework specifies the method to be used to determine fair 
value (and evaluate whether the stated fair value is consistent with that 
method). 

B. Quoted market prices (obtained from financial publications, national 
exchanges, or NASDAQ) usually provide sufficient evidence of fair value. 

C. If estimates of fair value are obtained from third-party sources (such as 
broker-dealers)—the auditor should obtain an understanding of their 
methods used. 

D. if management uses a valuation model — the auditor should obtain sufficient appropriate audit 
evidence about the fair value based on that model. It might be good to use more than one pricing 
source to see if there is any consensus when the valuationjs subjective or sensitive to changes in 
the underlying assumptions. 

E. Impairment Losses— the auditor should evaluate management's conclusion about the need 
to recognize an impairment toss, and obtain sufficient appropriate audit evidence supporting 
any impairment recorded. Determining whether a decline in fair value is other than temporary 
requires professional judgment, including consideration of the following: 

1. Whether the fair value issignificantly below the carrying value (and the period of time for 
which that has been the case) 

2. Whether the financial condition of the issuer has deteriorated 

3. Whether the security has been downgraded by a rating agency 

4. Whether dividends have been reduced or eliminated or scheduled interest payments have 
not been made 

5. Whether the entity recorded losses from the security after the period-end 

6. Unrealized appreciation or depreciation due to the ineffectiveness of a hedge—The 
auditor should obtain an understanding of the methods used to determine whether the 
hedge is effective, including the portion that is ineffective. 


Note 

The Statements on 
-Audltin^Stdndards^ftatf^il 

pre'ceded-theciariucii 
standards tended to 
dddress GAAP issues 
specifiaiify, \vhereas the 
- clarified standards are 
Jnte!h.d.edidb.en^^ 
respect to ibe applicable 
fnancial reporting -; 
firamewdikApcordlngly, m 
theciarMedstandaid-^ 
no longer addresses 
FASB-specificissues 
related to inyj^stipents 
andderlvdtiv^iij^THeAlCP^ 
has indicated that more 
technicaiguldapc^ a!bpyf:li 
auditing derlydtivesiViliU^^^ 
providi^indnAiCPAkudlt- 
Guldeofiihis tbp/c. •^: 
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Performing Further Procedures and Obtaining Evidence 


ill. investments in Securities When Valuations Are Based on Cost~The usual auditing procedures may 
include inspection of documentation of the purchase price, confirmation with outside parties, and 
testing the amortization of any discount or premium. 

iV. investments in Securities When Valuations Are Based on the Investee's Financial Results— 
(Another SAS addresses investments accounted for using the equity method.) 

A. Reading the Audited Financial Statements of the investee May Provide Sufficient 
Appropriate Audit Evidence —If unable to obtain sufficient appropriate audit evidence, the 
auditor should determine the effect on the auditor's report 

B. May Need to Obtain Additional Audit Evidence —When there are significant differences in 
fiscal year-ends or in accounting principles used, the auditor may make inquiries of investor 
management about the investee.The auditor may need to obtain evidence about any related 
party transactions between the investor and investee to evaluate the adequacy of disclosure 
about related-party issues. If there Is a lackof comparability, owing to different fiscal year-ends, 
the auditor may need to add an emphasis-of-matter paragraph to the auditor's report. 

V. Summary of Procedures with Emphasis on Four Balance-Sheet-Related Assertions —Summary of 
procedures used in auditing traditional Investment securities (i.e., stocks and bonds) with emphasis on 
the four balance-sheet-related assertions. 

A. Related to the Existence Assertion— The auditor mainly uses inspection and confirmation. 

1. Physically inspect any securities in the possession of the client entity. 

2. Confirm any stocks and bonds held by an independent custodian. 

B. Related to the Completeness Assertion— The auditor primarily uses analytical procedures to 
address the risk of omissions. 

1. Evaluate investment income or loss accounts: 

a. Verify revenue through confirmation when Investments are held by an independent 
custodian. 

b. May trace cash receipts to a bank statement 

c. May recalculate the interest income on debt instruments or dividends received on stock 
investments 

2. Compare dividends, interest, or other investment income (loss) to prior year's working papers 
for reasonableness; dividends can be verified by consulting dividend record books produced 
by commercial investment advisory services. 

3. Review the minutes of the meetings of those charged with governance for approval of any 
large transactions. 

C. Related to the Valuation Assertion— The appropriate audit procedures will vary with the nature 
of the securities involved. 

1. For bonds: 

a. Verify the interest earned by calculations (based on the face value, interest yield, and 
period held). 

b. Review the amortization of any premium or discount. 

c. Inquire about management's intention to hold the security to maturity (and document 
that inquiry in the management representations letter). 

2. For investments (In stocks or bonds) that are marked to market as required by the applicable 
accounting standards: 

a. Compare the carrying value at the beginning of the period to the prior year's working 
papers; agree to underlying documents, examine canceled checks for any current year 
additions to investments and trace the proceeds of any sales to a bank statement. 
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investments in Securities and Derivative Instruments 


b. Verify the year-end fair value (trace to an independent outside source, such as the Wall 
Street Journal or other appropriate quotation)—evaluate the adequacy of disclosure as 
required by the applicable accounting standards. 

c. Inquire of management about any impairments that may be other than temporary. 

3. For investments in stock accounted for by the equity method: 

a. Compare the carrying value at the beginning of the period to the prior year's audit 
working papers; agree (vouch) transactions to underlying documents and examine 
canceled checks for any current year's additions to Investments. 

b. Examine the investee's current year's audited financial statements to verify the investor's 
percentage share of income (loss) and any dividend distributions. 

c. Inquire of management about any impairments relative to the investment's carrying 
value. 

D. Related to the Rights and Obligations Assertion —^TTie auditor primarily uses inquiry and 
review. 

1. Inquire about management's intent and ability affecting investment classifications (and 
document the inquiry in the management representations letter)—recall the following basic 
GAAP considerations: 

a. Trading securities 

i. Balance sheet —Reported at fair value (in current assets) 

ii. Income statement —Unrealized holding gains/losses should be reported on the 
income statement (include interest and dividends, too) 

b. Available-for-saie securities 

i. Balance sheet —Should be reported at fair value (either current or noncurrent assets, 
as appropriate); use unrealized holding gains and losses as a separate component of 
stockholders'equity. 

ii. Income statement— The unrealized holding gains/losses should be reported in 
other comprehensive income, not included in net income! 

c. Held'to-maturity (debt) securities 

i. Balance sheet —Should be reported at the amortized cost basis (either as current or 
noncurrent assets, as appropriate). 

ii. income statement —No recognition of fluctuations in market value should be 
recorded! Should report Interest as revenue. 

2. Inquire of management about any restrictions applicable to investments (including any 
securities pledged as collateral for debt). 

3. Review cash receipts and cash disbursements, subsequent to year-end for any material 
transactions affecting investments, perhaps requiring disclosure. 
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Fixed As; 


Since the qomppsitibh of the fixed 

to the next, the auditor uspally emphasizes substantivetests oftransactions {that is^3^'^^tiriumg 
auditor usually verifies the ending balance by examining the debits and credits that cai^6 the baiance " 
/toehan^efrohi:theprioryear),> ' , ; 

After studying this lesson, you should 

1. fieGpgnize that the four assertions for^^Unt balances at the end of the period represent a ' 

;t_ framework for preparing an audit plan toWaluate the fairness offixed assets.' 

2i Ideritiiy the appropriate substantive audit proceduresto addte^eacbof^dse assertions when ^ 
■':';X:.^audifing'fixedassets.'" : ’ ■ 


Recall the four assertions that Professional Standards identify for account balances at the end of 
theperiod; (1) existence; (2) completeness: (3) rights and obligations; and {4hva.!uation and allocation. % 


I. Related to the Existence Assertion 

A. Consider the adequacy of the accounting records. Verify that the client's detailed fixed asset listing 
supports the related general ledger account balance. 

B. For Additions —Vouch to (inspect) the underlying documents (examine the purchase order, 
vendor's invoice, and the entity's canceled check if payment has been made); look for approval in 
the minutes of meetings of those charged with governance if the addition is a "major" one. 

C. For Disposals— Trace any proceeds received to the cash receipts journal and bank statement; 
review for appropriate approval. 


Note • . 

Insteadofperformingtests of ending balances, the continuing auditor will normally yerifythe appropriateness of the 
yearrend .balance of fixed assets by performing substantive tests of transactions. In ot her words, if there are relatively few ; 
transactions that have caused the fixed asset balance to change from last yearto thisyear, the auditor will, in effect, back 
into the ending balance by taking the beginning balance {audited last year), add any additions, and subtract any disposals. 
Sirice;th^re,are likely only a few additions and/or disposals, it is more effidentio examine those few transactions, rather than 

verify a sample.of the individuaj items that comprise the year-end fixeda^t balance. 


li. Related to the Valuation Assertion 

A. Review the calculations for depreciation expense—compare the useful lives and methods used to 
prior years for consistency, and recalculate on a testbasis. 

B. Consider whether there have been any impairments of long-lived assets requiring a write-down 
from the historical cost-based carrying value—make appropriate inquiries of management (and 
document such inquiries and management's response In the management representations letter). 

ill. Related to the Completeness Assertion 

A. Review the client's repairs and maintenance expense account, and examine underlying documents 
for material items to determine whether any of those recorded expenses should instead be 
capitalized. 

B. Review any lease agreements to determine If lease capitalization might be required. 

IV. Related to the Rights and Obligations Assertion 

A. Inquire of management about any fixed assets pledged as security for borrowings (and review 
loan agreements to identify such collateral). 

B. Document such inquiries {and management's response) in the management representations letter. 
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1 ), you should be ab^to: S 

Know how to identify apprr.i n • substantivo audit procedures to addresseach of those assertions 
when auditing currentjabilities. ^ - v 

Recognize that the four assertion* for account balances at the end ofthepenod represent a 
framework for preparing rii audit plan to evaluate the fuirne'S of current liabilities 


L Accounts Payable (or Vouchers Payable) —Primarily use substantive tests of ending balances. 

A. Recall the difference between accounts payable and vouchers payable systems described in the 
review materials related to Internal Control—^Transaction Cycles: 

1 . Accounts payable —In an accounts payable system, the payables are tracked by the name 
of the vendor. The total payable to another party, which constitutes a receivable to them, is 
susceptible to confirmation if desired. 

2. Vouchers payable —In a vouchers payable system, the payables are tracked by individual 
transaction without summarizing the amounts owed by vendor name. The total payable 
to another party is not susceptible to confirmation, only individual transactions could be 
confirmed. 

B. Recall the four assertions that AlCPA Professional Standards identify for account balances at the 
end of the period: (1) existence; (2) completeness; (3) rights and obligations; and (4) valuation and 
allocation. 

C. Related to the Completeness Assertion (for liabilities, the auditor's primary concern involves 
completeness not existence!)—Perform a search for unrecorded liabilities. This is done toward 
the end of fieldwork to provide the best chance of detecting any significant unrecorded liabilities. 

1. Review cash disbursements subsequent to year-end and, for all disbursements over some 
specified dollar amount (>$X), examine the related vendors' invoices and the entity's related 
receiving documents to identify transactions that should have been reported as liabilities 
as of year-end; compare those apparent liabilities to the details comprising the recorded 
payables to identify apparent liabilities that are unrecorded. 

2. Examine any unpaid invoices on hand at the date of'the''5earch"along with the entity's related 
receiving documents to identify any transactions that should have been reported as a liability 
as of year-end. 

3. Inquireof management about their knowledgeof any unrecorded liabilities and whether 
ail invoices have been made available to the auditor. Document such inquiries and 
management's response in the management representations letter. 

D. Related to the Existence and Valuation Assertions 

1. Verify the mathematical accuracy of payables by comparing the general ledger balance to the 
supporting detailed listing of payables. 

2. Vouch selected items to the underlying vendor's invoices. 

3. Could confirm selected payables, but usually do not—Confirmation primarily establishes the 
validity (existence) of the recorded items, but there is a relatively low risk that the company 
would overstate its true liabilities; the far bigger risk is that material liabilities may have been 
omitted (i.e., completeness). 

4. Usually valuation is not a significant audit issue, since there is a presumption that the client 
will pay 100% of what Is owed; the auditor should look to see that the client takes advantage 
of any available cash discounts for prompt payment 
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Performing Further Procedures and Obtaining Evidence 


E. Related to the rights and obligations assertion —Inspect the specific terms of the payables and 
inquire about any related party transactions. Separately classify notes payable for borrowings from 
accounts payable for ordinary operating activities. 

li. Other Current Liabilities—^The auditor uses analytical procedures extensively to evaluate other 

miscellaneous payables: 

A. Wages and Salaries Payable— The auditor can compute the estimated accrual, in view of the 
number of days to be accrued relative to a whole pay period. 

B. Dividends Payable—The auditor can compute. In view of the declared dividends/share (per the 
minutes of meetings of those charged with governance) times the number of shares outstanding. 

C. Interest Payable (and the Related Interest Expense)— The auditor can compute an estimate 
of accrued interest for the time period Involved, based on the interest rate (and payment dates) 
specified in the underlying debt agreements. 




222 















Long-Term LlabiSItles 


isson, you should be able to: f ^ 

1, Recognize that the four asser*»ons for acco jnt balances at the end.ofdie|>#io(| represent a 
framework for preparing an aucHtp^^^valuate the fairness^iqn.g*t^W?lia!3lities. 

'Z'. identify appropriate substantiveau^^^edures to address ^^^^^^Ss®'tioris'When'' 
auditing long-term liabilities, ^ ~ 


Recall the four assertions that Professional S| 
period: (1) existence; (2) completeness; (3) ril 


L Related to the Completeness Assertion —Use substantive tests of transactions (to address decreases 
in debt); 

A. Verify due dates for payments in the loan agreements. 


B. Trace cash disbursements from the accounting records to the bank statement. 


C. Examine canceled notes if paid in full. 


D. Could confirm year-end balances, but confirmations are most applicable to establishing the 
validity of recorded items (i.e., existence). 


II. Related to the Existence/Occurrence Assertion— Use substantive tests of transactions (to address 
increases in debt); 


A. Obtain copies of new loan agreements for the auditor's review and documentation. 

B. Verify authorization of new debt in minutes of meetings of those charged with governance. 

C. Trace receipts from the accounting records to the bank statement. 

III. Related to the Valuation Assertion— There are few measurement issues associated with most 

liabilities, but long-term liabilities should be based on present values: 

A. Trace related cash receipts and disbursements from the accounting records to the bank 
statements. 

B. Examine the underlying loan contracts related to the stated dollar amounts. 

C. Recalculate the amortization of any premium or discount using the effective interest method. 

D. Apply analytical procedures to the related expense accounts (e.g., interest)—Note that the 
balance sheet item and the related Income statement item are usually addressed on the same 
audit documentation (working paper). 

IV. Related to the Rights and Obligations Assertion— The auditor should make appropriate inquiries of 

management and review the loan documents: 

A. Debt Covenants —Important restrictions should be disclosed. (Note that violations of such 
covenants can cause the entire balance to become Immediately payable.) 

B. Collateral—Any assets pledged as security for the debt should be disclosed. 

C. The current portion of long-term debt should be reclassified to current liabilities—Read the loan 
documents to identify the principal to be paid within the next year; examine the cash payments 
for the current-year installment paid If the debt is scheduled to be paid in equal installments. 
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jould be able to: 

>ns for account ba!an<^J|pSi^^^the period represent a 
Hit plan to evaluate th^^^^^^^Jkhoiders'equity. 

ie audit procedures to P^^^^^Wthdse asserrioris wHeri 


Recognize that the 1 
frarneworkfor prep; 

Identify appropriate 
auditing stockholde 



I. Related to the Existence Assertion —Confirm the outstanding shares of stock if there is an external 

registrar. (Verify that the stock was issued in accordance with the company's articles of incorporation 

and with the approval of those cKarged with governance.) 

II. Related to the Completeness Assertion 

A. Review the minutes of meetings of those charged with governance to identify authorized 
transactions. 

B. Account for all certificate numbers to establish that no unauthorized shares were issued. 

III. Related to the Rights and Obligations Assertion 

A. Review the minutes of board meetings to verify that any stock and dividend transactions were 
duly authorized by those charged with governance. 

B. Review contracts with employee stock option plans to verify compliance with such agreements. 

C. Inquire of management about any restrictions that might exist on the availability of retained 
earnings for purposes of dividend distribution—the financial statements should disclose any 
restrictions on retained earnings available for dividend distribution. 

IV. Related to the Valuation Assertion 

A. Review cash receipts and disbursements (and minutes of meetings of those charged with 
governance) for increases or decreases In stock accounts. 

B. Compare the subsidiary ledger to the general ledger stock accounts. (Examine stock certificates 
or read the applicable minutes of meetings of those charged with governance to verify the par or 
stated value per share.) 
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When the aucfitor ch 
opposed to an outsi 
payroll transaction c 



lidled in-hbuse by the company (as 
|ro! considerations associated with the 
Iction Cycles." 


framework for pr|panng An audit plaivto evaluatethefa n . df income statement items, such as 

payroll expense. 

Identify approprilte substantive dudit piocedures to address payroll expense.* 


___ 


teall the five assertions that Professional Standards Identify for "classes of transactions and 
events for the period under audit": (1) accuracy; (2) occurrence; (3) completeness; (4) cutoff; and 
(5) classification. 


I. Related to the Accuracy and Occurrence Assertions 

A. Examine personnel records on a test basis, to determine that the levels of compensation and 
support for all deductions exist for all employees. (Officers'compensation should be documented 
in the minutes of meetings of those charged with governance.) 

B. Trace selected transactions from the payroll register to the general ledger and to the payroll bank 
account. 

C. Recalculate selected entries on the payroll register. 

II. Related to the Completeness Assertion 

A. Review time reports and time cards to verify support for production records. 

B. Apply analytical procedures (and recalculation) to verify that the payroll-related accruals at year- 
end are reasonable. 


III. Related to the Cutoff Assertion-Cutoff Is effectively addressed when occurrence and completeness 
have been addressed; In other words, when the auditor has established that recorded transactions are 
properly recorded and that there are no omissions of transactions that should have been recorded, the 
auditor has established that the transactions have been recorded in the correct accounting period. 


‘ AiCPA professional 
of transactions and 
consideration of recoylp 







intir^perlocl.":'^" 



,te assertion related to cutoff 
.sertlons include appropriate i 


IV. Related to the Classification Assertion 

A. The comments related to accuracy and occurrence apply to recording the transactions in the 
proper accounts, as well. 

B. Review outside reports related to pension, other post-retirement benefits (e.g., insurance), and 
profit-sharing plans. 

C. Verify payroll deductions and taxes, trace cash disbursements for withholdings to appropriate 
agencies. 
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D. Note that ordinarily, income statement elements (Including revenue and expense items) are 
primarily audited by analytical procedures.Typically, tests of details will be performed only when 
the analytical procedures suggest that a risk of material misstatement exists and that a more 
detailed investigation is warranted. Payroll-related expenses would normally be subject to such 
analytical procedures, too. The discussion above is presented to provide insights about how such 
transactions could be tested in detail If the auditor deemed that appropriate. 
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After studying this lesson, you should be able to: 

1. Understand the stinciion between statistical and nonstatistical audit sanftpling. 

2. Understand thi distinction between sampling risk and nonsampling risk. 

3. Ut^rstandkhldistniction between fcih>. n ject'on (aType 1 Error)andfalseaGceptance.<aType2 
Eri^) comprising sampling risk that an . |)plicdble to control and substantive procedures tests. 


"'bettnitidn' 

SdmpV/ngr"TheseleGtionandevaluationt)flessthan l6o%oftheb6p'ujaddn.dfaudit# 
that the auditor expects the ltems,.sefected to be representative of the populatjon..." 


I. Responsibilities under AlCPA Professional Standards— The relevant AiCPA guidance is provided 
by AU 530, Audit Sampling. This pronouncement states that the auditor's objective is to provide a 
reasonable basis for the auditor to draw conclusions about the population from which the sample is 
selected. 

II. There Are Two General Approaches to Sampling —May depend on the auditor's perceptions of cost/ 
benefit trade-offs. 

A. Nonstatistical Sampling— Also called judgmental sampling 

B. Statistical— The benefits relate to objectivity: 

1 . Relates to the sufficiency of the evidence—^The determination of the sample size in a 
statistical sampling application establishes how much evidence is required. 

2. The results may seem more defensible to others (such as the courts). 

3. A common misconception Is that statistical sampling eliminates the need for judgment. 
Actually, numerous judgments must be made; however^ these judgments are made more 
explicit. 

4. Sampling applications occur in either of two contexts: 

Definitions 

Attributss Sampling: S 3 rnp\mg fo\ purposes of deciding whether internal controls are working as 
^ designed ftertspf controls), . r 

Variables Sampling Sampling for purposes of deciding wheihei acrount balances (such as inventory c/t 
f receivables) are fairly ni u ubstanlive tests of details) 


Mi. Uncertainty and Audit Sampling — Risk Considerations (Recall the definition of audit risk )—^The 
probability that the auditor fails to modify the opinion on financial statements containing a material 
misstatement. Auditors may use the following model to evaluate the risk components explicitly: 
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RMM = risk of material misstatement consSslang ^ inherent risk and 

AP = risk that analytical procedures performed for substantive purposes will not detect a material 
misstatement that occurred; and - ^ ' '“j, ' 

TD = risk that tests of details will fail to detect a material misstatement that was not otherwise detected. 


iV. Whether Nonstatistieal Sampling or Statistical Sampling Is Used— The auditor is fundamentaliy 
seeking a sample that is truly representative of the population, so that the auditor gets an accurate 
signal about the population's characteristics In a highly efficient way. 

V. Sampling Risk— Is the risk that the sample may not be truly representative of the population; in other 
words, the chance of an erroneous conclusion that the auditor takes by examining a subset of the 
population, rather than the entire population. 

A. Type 1 Errors (False Rejection) 

1 . Tests of controls => the risk of underreliance on Internal controls (also known as risk of 
assessing control risk too high). 

2. Substantive testing => the risk of Incorrect rejection. 

3. Type 1 errors relate to efficiency—the auditor will probably achieve 
the appropriate conclusions, although not in the most efficient 
manner (perhaps taking more than one sample, maybe at the 
urging of the client who has faith In the effectiveness of the Internal 
control or the fairness of the financial statement element). 

B. Type 2 Errors (False Acceptance) 

1 . Tests of controls => the risk of overreliance on Internal controls 
(also known as the risk of assessing control risk too low). 

2. Substantive testing => the risk of incorrect acceptance. 

3. Type 2 errors relate to effectiveness—now the auditor may have failed to meet the overall 
objective, which is to limit audit risk to an acceptably, low level. (The client will have no 
incentive to argue about this conclusion, so the auditors will not have any reason to take a 
second look.) 

Vi. Nonsampling Risk— Refers to any other mistakes by the auditor (i.e., other than sampling risk), not a 
direct consequence of using a sampling approach: 

A. Inappropriate auditing procedures. 

B. Failure to correctly identify "errors" or amounts sampled, misinterpreting the results, etc. 


Note 

ifihm were my^rl^tfon 
Within a popubtlori 
. ihe»ifaniisms w&e s 

homQgenwusJfthe 
auditor wouldonly 
need a sample of one ' 

the sample size to /»c«ase 
and Is responsible for the 
sampling lisk. 














lid be able to 


Understand the "attributes sampling,' 

Know the eight steps an attribules-sampliHg application. 

Know how to determih&l^^^ple size for an attributes sampling application using AlCPA tables. 


I. Attributes Sampling—Statistical sampling for the purpose of identifying the percentage frequency 
of a characteristic in a population of interest to the auditor; this term is usually used to refer to audit 
sampling to ascertain the operating effectiveness of internal control (where, for each transaction In the 
sample, the control procedure of interest was either performed or not performed—there are only two 
outcomes, similar to '"hit or miss" or "heads or tails") 

II. Eight Steps Comprise an Attributes Sampling 

A. Identify the Sampling Objective —That is, the purpose of the test. 

B. Define What Constitutes an Occurrence— Sometimes called a deviation or error when a control 
procedure of interest was not properly performed. 

C. identify the Relevant Population 

1. Specify the relevant time period. 

2. Specify the sampling unit—what It Is that the auditor is selecting (e.g., sales transactions). 

D. Determine the Sampling Method —How the specific Items {or transactions) are to be selected 
for the sample. 

1. Statistical sampling approaches 

a. Random number —Each transaction has the same probability of being selected (the best 
approach). 

b. Systematic —For example, selecting every 100th Item 

2. Judgmental sampling approaches— not appropriate for attributes sampling! 

a. Block —A group of contiguous Items (€.g., the sales transactions for the entire month of June) 

b. Haphazard —Arbitrary selection, with no conscious biases. Subconscious biases may 
exist without the auditor's awareness, however. 

E. Determine the Sample Size —Based on AlCPA tables. 

^(Factor (holding all oth$r£constant) Relationship 

Expected error rate (related to the variadon in pbpulS'^^v. - 
Tolerable (deviation) rate (related toprftdMbh) 

^Riskof overrellance 
; : Risk of underreliance (implicit) 

Population size (implicit) 

F. Select the Sample—Identify the occurrences associated with all the items in the sample. 

G. Evaluate the Sample Results—This means make a decision as to whether the auditor can rely on 
the effectiveness of the Internal control procedure under consideration. 

1. Calculate the observed deviation rate = (# errors)/n. 


Direct 

Inverse 

Inverse 

Inverse 

Direct 
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2. Determine the point estimate, the best single indicator of the percentage of times that the 
control procedure was performed as designed in the population (ignoring, for the moment, 
the uncertainty surrounding whether the sample Is truly representative of the population). 

3. Calculate a confidence interval for the achieved upper precision limit (in view of the actual 
errors observed). There are AlCPA tables to determine the achieved upper precision limit. (The 
topic determination of confidence intervals is not likely to be tested on the CPA Exam!) 

4. Compare the achieved upper precision limit to the stated tolerable rate; the auditor can 
only rely on the internal control procedure if the error rate, based on the upper bound of the 
confidence interval (the achieved upper precision limit from the tables) is less than or equal to 
the stated tolerable rate. 

5. Consider the qualitative characteristics of the Internal control deviations for any implication 
to the rest of the audit. 

6. Make the appropriate decision—Should the auditor rely on the specific control procedure (i.e., 

assess control risk at less than the maximum) or not? 

H. Document the Auditor's Sampling Procedures 
III. Attributes Sampling Example 


Statistical Sample Sizes for Tests of Controls 


5% Risk of Overreliance 1 

Expected Population 

Tolerable Rate 

Deviation Rate 

mm 

3% 

4% 

5% 


7% 

.25 


157 

117 

93 

lOi 

66 

.50 

* 

157 

117 

93 

78 

66 

.75 

* 

208 

117 

93 

78 

66 

1.00 


* 

156 

93 

78 

66 

1.25 

E 

* 

156 

124 

78 

66 

1.50 

* 

* 

192 

124 

103 

66 

1.75 

E 


227 

153 

103 

88 

2.00 

E 

* 

« 

181 

127 

88 

* Sample size is too large to be cost-effective for most auc 

it applications. 


Note: This table has been adapted from material copyrighted by the American Institute of 
Certified Public Accountants, Inc. 


IV. Attributes Sampling—Numerical Example 

A. Suppose that an auditor specified the following parameters for a statistical sampling application 
related to internal controls in the revenue/receipts transaction cycle: 


Acceptable risk of overreliance on 
Internal control li''ror) 5% 

'hi iiK ito sill I IK I Ivon the control procedure if the statistical test indicates that the control js 
working as prescribed at least 95%ofth&tlme.) « . ' 

Ebtimated population deviation rate 1% 

Tolerable deviation rate 5% 


B. Requirement—Identify the required sample size using the AlCPA tables for attributes sampling. 

C. Solution—The 5% risk of overreliance (Type II Error) determines the applicable page of the 
AlCPA tables; the 5% tolerable rate determines the applicable column of the AlCPA table; and the 
1% estimated population deviation rate determines the applicable row of the AlCPA table. 

1. The resulting sample size is 93. 
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After studying this lesson, you should be able to; 

1. Understand the meaning ofthe term "variables 5ampling"and the various specific approaches 
(difference estimation, ratio estimation, mean-per-unit estimation, and probability-proportionate- 
to-size sampling). 

2, Know the eight steps that comprise a variables-sampling application. . 

3. Know the factors that affect the sample size for a variables-sampling application. 

4, Understand the role of"stratification"in audit sampling. 


I. Relies Heavily on the Classic Normal Distribution —(With the bell-shaped 
curve.) 

A. This distribution is determined by two parameters: 

1 . The mean, related to central tendency; and 

2. Variance (or its square root, standard deviation), related to 
dispersion or variability. 

II. Basic Steps— ^The eight basic steps in a variables sampling plan are 

practically the same as in the attributes sampling case: 

A. Identify the Sampling Objective— The purpose of "variables sampling" 
is to determine the inferred audit value of a population of Interest (e.g., 
for accounts receivable or inventory). 

B. Identify the Relevant Population: 

1. Specify what constitutes the sampling unit. 

2. 8e careful to assure that conclusions are properly extended to the appropriate population (i.e., 
completeness ofthe population). 

C. Select the Specific Sampling Technique —^The choices are difference estimation, ratio estimation, 
mean-per-unit estimation, or probability-proportionate-to-size sampling. 

D. Calculate the Sample Size —Since tables do not exist for this in variables sampling. Recall the five 
factors and relationships to sample size identified for attributes sampling applications—these 
factors are still applicable to variables sampling. - 


Note 

If^8% ofthe area is under 
the bell-shaped curve, it 
is within one standard 
dev}athnofthemean;if 
95.$% ofthe areals under 
the bell-shaped curve, it \ 
Is within two standard 
^evtatlonsofdiemean. 


Note 

a1ltheltemsdiat<ire 

fndWMdHtip'dwMSM 

{i.e„we are not sampling; 
these). 
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Factor (holding all others constant) 

t lur.ciicfi population standard deviation (related to the variation in population) 
A'loAr.nc r for sampling risk (also called •tolerable misstatement") [related to pietisioni 
Risk of incorrect acceptance (Type II) 

Popiilation si^e (eypiicitly considered for variables sampling) 

Hibl- of inconect rejection iType I erroi, only Iriri^jidtly toMdered) 


Relationship 

Direct 

Inverse 

Inverse 

Direct 

Inveistr 


Thc- basic formula, based on classical statistics:. 












n represents the sample size to be determined 

S represents the estimated population standard deviation (related to the variability of the population). ; 




fe-cbafficient represents a rheasure of reliability for some level of specified "confidence" (typically about 2)., 
' N represents the size ohhe population (numberofaccounts or items of inventory, etc.) ^ 

A represents the specified allowance for sampling risk, related to the statistical concept of "precision." ' i 


It Js very unlikely that the AlCPA will require calculations of sample size! However, they frequently test tbese concepts. In 
particular, they might ask questions related to the factors that influence the sample size and whether that influence is'^ ^ 
directly or inversely related. The formula identified above is a usefutwayto keep tt^ese relationships straight. 


E. Determine the Method of Selection— Random (the preferred approach) or systematic. 

F. Conduct the Sample 

G. Evaluate the Sample and project to population: 

1. Calculate a point estimate (the Implied audit value) for the population based on the sample's 
audited values. 

2. Construct a confidence interval to determine whether to accept or reject the client's recorded 
balance as consistent with the audit evidence. 


Note 

The AlCPA has rarely tested calculations In this area. On a fevv occasions, they have required calculations of a "point 
estimate" for a populattdni however, calculations of the confidence Interval surrounding a point estimate are beyond the 
scope of the CPA Exam! ; 
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H. Document the Auditor's Sampling Procedures and Judgments. 


Definition 

StratificationiThe auditor may re(p:e the overall variability within a population by classifying similar 
items into sub-populations {withjeach group, the variability may be much smaller);the resulting 
aggregate sample size may be srMler as a result of reducing the combined effects of variability. 


III. Variables Sampling—Specific Sampling Techniques—Note that the CPA Exam has rarely 

emphasized calculations related to statistical sampling; however, the exam has historically tested the 
concepts related to sampling. 

A. Difference Estimation—^This approach Involves identifying the dollar differences between the 
sample's audit values and applicable book values. 

1. Sample size—As previously described. Note that we usually need at least 30 differences 
between audit and book values In our sample when using "difference estimation." 

2, Estimate the population's implied audit value. 

B. Calculate the average difference between the audit value (av) and book value (bv) for items in the 
sample: 



C. Extend that average difference to the population by multiplying It by the number of items in the 
population; 



D. Calculate the implied population audit value (the "point estimate") by adding the calculated 
difference for the population to the population's book value: 


,:^V^ jae eitherpositive or negative. 


1. Construct a confidence (precision) interval around the population's audit value to compare to 
the client's recorded balance—This is beyond the scope of the CPA Examination. 

E. Ratio Estimation—This approach involves identifying the ratio of the audit values and book 
values for the sampled items. 

1. Note that this approach is useful when thedollaramount of the differences between the 
audit and the book values is expected to be proportional to the book values. 

2. Sample size—as previously described. 

3. Estimate the population's implied audit value: 


F. Calculate the ratio for the sample, where the ratio has the sample's audit value in the numerator 
and the sample's book value in the denominator: 
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6. Estimate the population's audit value (a point estimate) by multiplying the population's book 
value by that "ratio:" 


AV = R*BV 


1. Construct a confidence (precision) Interval around the population's audit value to compare to 
the client's recorded balance—this is beyond the scope of the CPA Examination. 

H. Mean-per-Unit Estimation (MPU) 

1. Useful when difference or ratio estimation cannot be used—for example, for inventory when 
perpetual records do not exist (i.e., there is no "book" value for each individual sample item). 

2. Sample size—as previously described. 


3. Estimate the population's implied audit value. 

a. Calculate the average audit value for Items in the sample: 



b. Multiply that average (MPU) times the number of items in the population: 


/W = MPM‘N 



4. Construct a confidence (precision) Interval around the population's audit value to compare to 
the client's recorded balance—this is beyond the scope of CPA Exam! 


I. Probability-Proportlonal-to-Size (PPS) Sampling— An introduction: 

1. The sampling unit is an individual dollar (when a given dollar is selected for the sample, It 
attaches to the related account or Item which Is then examined in its entirety); note that 
individually material items are automatically selected. 

2. PPS is useful if there are relatively few differences between audit and book values; otherwise, 
the sample size can become very large and the PPS application then becomes inefficient. 

3. The main advantage Is efficiency—It can achieve the maximum possible stratification (which 
then minimizes the effects of variability on sample size). 

4. The main disadvantage Is that PPS does not work very well in auditing negative balances 
(understatements) or zero (unrecorded) balances. Applies best to audit concerns involving 
overstatements (e.g., accounts receivable or Inverrtory when few misstatements are 
expected). 


PPS sampling will be addressed in more depth in^e next lesson. 
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|)u should be able to: 

1. Understand the relevantlampling unit for probabiiity*proportionate*to-size sampling. 

2. Determine the sample sij and the sampling interval for a probabiiity-proportionate-to-size 

: sampling application. I ; 

Si- ' ■ 

3. Determine the proJect€<^isstatement for a probability-proportionate-to-size sampling 
application. 




I. PPS "Sampling Unit"—PPS sampling defines the "sampling unit" to be an individual dollar associated 
with the financial statement element involved. (Variations of this approach are referred to as dollar- 
unit sampling or monetary-unit sampling.) For example, suppose accounts receivable consists of 7500 
customer accounts having a total balance of $3,000,000.The population is viewed as consisting of 
3,000,000 individual items (dollars) rather than 7500 accounts. However, when an Individual dollar 

is selected as part of the sample, if attaches to the related account or logical record, which is then 
examined in its entirety. Accordingly, the probability that an individual account will be selected is 
"proportional"to that individual account's balance relative to the total for all accounts. 

II. Primary Advantage of PPS Sampling— The main advantage of PPS sampling is efficiency. If there are 
few differences between audit and book values, PPS sampling may result in smaller sample sizes than 
the other sampling methods. If there are many differences, however, PPS sample sizes can become too 
large to be practical. 

Ml. Primary Disadvantage of PPS Sampling— The main disadvantage of PPS sampling is that it does 
not work very well in auditing negative balances (understatements) or zero (unrecorded) balances. It 
applies best to audit circumstances involving concerns about overstatements, such as for accounts 
receivable or inventory; and, then, only when few misstatements are expected. 

IV. Basic Steps in a PPS Sampling Application 

A. Determine the Sample Size— based on three considerations: 

1. The"reliabiiity factor" (from an AlCPA table based on the risk of incorrect acceptance and the 
number of overstatements permitted—see the table below); 

2. The population book value; and 

3. The tolerable mlsstatement(netof any expected misstatements). 

Tolefuok n isst lUMncnt n^tof i xpftled mtss^ntemenis 
Alternatively, n = Book value/Sami^^^^^^^here:'''': 

Sampling interval =Tolerable miss^J^^^^^^expeded fnisstatements)/ReHability tf-'-ior 
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REUABIEtTYF^^Rg; 



Risk of Incorrect Acceptance, , . 

Number of 
Overstatements 

m 

.5% 

.10% 


.20% 

0 

4.61 

3.00 

2.31 


1.61 


6.64 

: 4.75 

3.89 

3.38 

3.00 

2 

8.41 

6.30 

5.33 

4.72 

4.28 

3 

10.05 

.7.76 

6.69 

6.02 

5.52 

4 

1.1,61 

9.16 

8.00 


6.73 

5 

13.11 

10.52 

9.28 

mm 

7,91 


B. Select the Sample— PPS samples are usually selected using "systematic selection" with a random 
starting point and a specified "sample Interval" 


^ . . Population book value 

Sample interval=---;—:- 

Sample size 


C. Evaluate the Recorded Book Value— To "evaluate" the entity's recorded balance relative to 
the implied audit value for the population, the auditor should calculate the "upper limit on 
misstatement" which corresponds to the upper limit of a confidence interval. Such computations 
are beyond the scope of CPA Exam, but a few concepts (especially "projected misstatement") may 
be worth remembering. 


Upper limit on misstatement 

.= [ Basic precision + Projected misstatement + Incremental allowance] 
where: 

Bask precision: 

Basic precision = Reliability factor xSample interval (forX) misstatements) 

Proje^ed misstatement: ' - 

For acmmts having a book value greater than or equaho the sample Interval, the actual misstatement 
should be used to determine the "projected misstatement." 

For accounts having book values less than the sample interval, the auditor would have to apply the 
"tainting percentage" to the sample interval from which that account was selected. Suppose that the 
sample interval is $2,000 and that an account havlng/hook Value of $250 has an audit value of $200. 
The "tainting" is $50/$250 = .20; and, since the account's book value is less than the sample interval, 
the projected misstatement for this account would be .20 x $2,000 = $400. 

When there are no misstatements in the sample, the projected misstatement Is zero. 

Incremerital allowance: 

The increiiiental allowance is zero if there are no misstatements of accountshaving book 
valueslessthan the sample interval. The concept is only relevant when there are misstatements of 
accounts having book values less than the sarnple interval, but the calculatiori itself is a technical issue 
that is beyond the scope of the CPA Exam. 
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Example Problems 

Difference Estimation Problem 


I. Calculating a Point Estimate —Using statistical sampling to assist in verifying the year-end 

accounts payable balance, an auditor has accumulated the following data (based on a 1984 AlCPA 
Exam question): 



No. of Accounts 

Book Balance 

Audit Value 


4100 

$5,000,000 

77 


200 

$250,000 

$300,000 


11. Required —Using difference estimation, calculate the implied value for the year-end accounts 
payable balance. 
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Difference Estimation Solution 


[. Calculating a Point Estimate—Using statistical sampling to assist in verifying the year-end 

accounts payable balance, an auditor has accumulated the following data (based on a 1984 AlCPA 
Exam question): 



No. of Accounts 

Book Balance 

Audit Value 

Population 

4100 

$5,000,000 

77 

Sample 

200 

$250,000 

$300,000 


11. Required—Using difference estimation, calculate the Implied value for the year-end accounts 
payable balance. 

A. First, calculate the average difference for Items In the sample; 


d = (av - bv)/n => ($300,000 - $250,000)/200 = $250 ; - 

S. 

Second, extend that average difference to the population by multiplying It by the number of items 
nthe population: 


i*N:f=>'$250»4,100.=-$1>025,oqp' 


C. Third, estimate the population's audit value by adding that difference to the population's book 
value; 



AV = BV + D -> $5;^0,000 + $i,0:a,Q0p $M25,OOp 


EwiriTIp:.': 

^yeh titough ratioestifnatjon and difference 
Auditor would reach 


fcOpe^theiGm 
















i. Calculating a Point Estimate—Using statistical sampling to assist in verifying the year-end 

accounts payable balance, an auditor has accumulated the following data (based on a 1984 CPA Exam 
question): 



No. of Accounts 

Book Balance 

Audit Value 

Population 

4100 

$5,000,000 

77 

Sample 

200 

$250,000 

$300,000 


li. Required—Using ratio estimation, calculate the implied value for the year-end accounts payable 
balance. 
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Ratio Estimation 


I. Calculating a Point Estimate—Using statistical sampling to assist in verifying the year-end 

accounts payable balance, an auditor has accumulated the following data (based on a 1984 CPA Exam 
question): 



No. of Accounts 

Book Balance 

Audit Value 

Population 

4100 

$5,000,000 

77 

Sample 

200 

$250,000 

$300,000 


11. Required—Using ratio estimation, calculate the Implied value for the year-end accounts payable 
balance. 


Ratio = av|)v => $300,000/$250,000 ^ 1.2 


A. Estimated population Audit Value = ratio * population Book Value 
-------—--—... .^ ^ ^ 










Calculating a Point Estimate—Using statistical sampling to assist in verifying the year-end 
accounts payable balance, an auditor has accumulated the following data (based on a 1984 CPA Exam 
question): 



No. of Accounts 

Book Balance 

Audit Value 

Population 

4100 

$5,000,000 ! 

7? 

Sample 

200 

$250,000 

$300,000 


Required—Using mean-per-unit estimation, calculate the implied value for the year-end accounts 
payable balance. 





!. Calculating a Point Estimate—Using statistical sampling to assist in verifying the year-end 

accounts payable balance, an auditor has accumulated the following data (based on a 1984 CPA Exam 
question); 



No. of Accounts 

Book Balance 

Audit Value 

Population 

4100 

$5,000,000 

?? 

Sample 

200 

$250,000 

$300,000 


II. Required—Using mean-per-unit estimation, calculate the implied value for the year-end accounts 
payable balance. 

A. First, calculate the mean per unit (I.e., the average audit value for items in the sample): 



B. Second, calculate the implied audit value for the population by multiplying that MPU times the 
number of items in the population: 
























A Numerical Problem—Sample Size for PPS Sampling 

I. Hil! has decided to use probability-proportional-to-size (PPS) sampling, sometimes called dollar-unit 
sampling, in the audit of a client's accounts receivable balances. Hill plans to use the following PPS 
sampling table: 


Reliability Factors for Errors of Overstatement 


Number of 
Overstatements 

Risk of Incorrect Acceptance 

1% 

5% 

10% 

15% 

20% 

0 

4.61 

3.00 

2.31 

1.90 

1.61 

1 

6.64 

4.75 

3.89 

3.38 

3.00 

2 

8.41 

6.30 

5.33 

4.72 

4.28 

3 

10.05 

7.76 

6.69 

6.02 

5.52 

4 

11.61 

9.16 

8.00 

7.27 

6.73 


Additional Information 


Tolerable misstatement (net of effect of expected misstatement) 

$ 24,000 

Risk of incorrect acceptance 

20% 

Number of misstatements allowed 

1 

Recorded amount of accounts receivable 

$240,000 

Number of accounts 

360 


II. Required—What sample size should Hill use? 
















PS Sampling Solution 


!. Hill has decided to use probability-proportional-to-size (PPS) sampling, sometimes called dollar-unit 
sampling, in the audit of a client's accounts receivable balances. Hill plans to use the following PPS 
sampling table: 


Reliability Factors for Errors of Overstatement 


Number of 
Overstatements 

Risk of Incorrect Acceptance 

1% 

5% i 

10% 

15% 

20% 

0 

4.61 

3.00 

2.31 

1.90 

1.61 

1 

6.64 

4.75 

3.89 

3.38 

3.00 

2 

8.41 

6.30 

5.33 

4.72 

4.28 

3 

10.05 

7.76 

6.69: 

6.02 

5.52 

4 

11.61 

9.16 

8.00 

7.27 

6.73 


Additional Information 


Tolerable misstatement (net of effect of expected misstatement) 

$ 24,000 

Risk of incorrect acceptance 

20% 

Number of misstatements allowed 

1 

Recorded amount of accounts receivable 

$240,000 

Number of accounts 

360 


11. Required —What sample size should Hill use? 

A. n = reliability factor from tables * Bookvalue/tolerabie error 

B. =>(3.0*$240,000)/$24,000 = 30 
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IT (Computer) Auditinc 

IT Controls—General Controls 


>u should be able to: 

1. Understand nf the term "neneral controls" rele' 

environment 

2. Know the five categories of such general controls. 



I. The Study and Evaluation of Internal Control— This is somewhat different in a computerized 
environment: 

A. The basic control objectives are the same, however! 

B. Particular considerations in an'Electronic Data Processing (EDP) {often referred to as an 
Information Technology [IT]) environment: 

1 . A disadvantage is that the segregation of duties may be undermined — if someone gets 
unauthorized access to the computer system, It may be difficult to separate incompatible 
activities. 

2. Another disadvantage is that the usual audit trail may be lacking. There may be no "paper 
trail" auditors are accustomed to following. 

3. An advantage is that computer processing is uniform —Computers don't have "good" 
days and "bad" days; if a particular transaction is processed correctly one time, an identical 
transaction will be processed correctly, too. 

C. The specific evidence gathering procedures may differ. 

II. General Controls— Controls that have pervasive effects on all the specific applications; there are five 
categories of general controls: 

A. Organization and Operation 

1. Segregation of duties— Especially within the EDP department; also between the EDP and 

various user departments " ' 

2. Focus on the primary areas of responsibility —As much as possible, try to separate the 
following activities within the EDP department: 

a. Systems analyst —Responsible for designing the system 

b. Programmer —Responsible for writing the code that makes up the programs 

c. Operator —Responsible for running the system 

d. Librarian —Responsible for keeping track of the programs and files and verifying that 
access is limited to authorized personnel 

e. Security —Responsible for protecting the programs and data files and implementing 
procedures to safeguard the system 

B. Systems Development and Documentation —Regarding the appropriate authorization and 
documentation of new systems; any changes should be appropriately documented. 
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C. Hardware and Systems Software 

1. Built-in controls 

a. Parity check—Especially related to transmissions of information between system 
hardware components. A b/f added to each character so that the loss of any portion of 
the data might be detected. 

b. Echo check —Especially related to transmissions of information over the phone lines. A 
signal that what was sent was, in fact, received. 

c. Diagnostic routines— ITiat check internal operations of hardware components (usually 
when booting up the system). 

d. Boundary protection —For running multiple jobs concurrently. 

2. Operating system —Controls and Instructions built Into the software that runs the hardware. 

D. Access— ^The access to data, software, and the hardware should be limited to authorized 
personnel. 

E. Data and Procedures —Including physical safeguards that can protect the data files: 

1. File labels —Internal and external labels that might prevent using a file for an unintended or 
inappropriate use 

2. File protection rings— A processing control related to magnetic tapes that prevents critical 
data from being overwritten (similar to a "read only" switch on a floppy disk) 

3. File protection plans— Duplicates or prior generations. "Grandfather" and "father" versions 
that can be used to recreate a current file by updating earlier files with current transaction 
data 



IT Controls- 


Alt!@rstU£lyln0thisle5son,yDU^ouldbeableto: | 

1. Understand the meaningoftle term application control relevant to an IT (computerized): 


environment. 




2. Know the 3 categork: ofbpplcation controls (input, prcftssing, and output) and specific examples: 
of controls associated witbe^h. I 


1. Application Controls —Related to the specific computer processing applications; now the emphasis is 
placed on the specific input, processing, and output activities. 

A. Input 

1. Objectives —^That the input of data Is accurate and as authorized. 

2. Examples 

a. Preprinted forms— So that employees will know exactly where to look for particular 
items of information. 

b. Keypunch —Verification/duplication. 

c. Control totals —Where useful comparisons are made to verify that all of the data were 
input properly. 

i. Batch totals —Totals that actually mean something (e.g., the day's cash withdrawals 
at an ATM location). 

ii. Hash totals— Totals that have no meaningful interpretation per se, even though a 
total can be arithmetically determined (e.g., adding up employees' social security 
numbers to verify that no employees were dropped from a payroll application). 

iii. Record count— Keeping track of the number of records processed to determine that 
the appropriate number was accounted for. 

d. Logic checks —Refers to certain computer edit routines that might signal when 
erroneous data have been input. 

i. Limit tests —Are the data all within some predetermined range? For example, a 
payroll program may specify an upper limit for how many hours can be legitimately 
worked. 

ii. Validity checks —Are the data recognized as legitimate possibilities (e.g., gender 
codes can only be"M"or"F")? 

iii. Missing data checks— Are there any omissions from any fields in which data should 
have been present? 

iv. Check digits —A check digit is an arithmetic manipulation of a numerical field that 
captures the information content of that field and then gets "tacked" onto the end of 
that numeric field. 

e. Error resolution procedures —Whenever the control procedures flag a data input 
problem, tliere should be procedures to pull out the item, fix the problem, and then put 
the item back in line for data entry. 


1. Objectives—That the processing of data is accurate and as authorized 
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2 . Examples 

a. Control totals—Same as for the corresponding section under Input above 

b. Checkpoint/restart—For particularly long processing runs, there should be built-in 
checkpoint/restart procedures so that. If the program crashes, it does not have to be 
restarted from the very beginning. 

c. Limit on processing time— A predetermined limit for computer processing time might 
be specified; if that time is exceeded, the program can assume an error has occurred and 
shut down the processing run. 

d. Internal (e.g., headers) and external labels— Should be used on all files to reduce the 
likelihood of mistakes caused by using the wrong files. 

e. Error resolution procedures (the same idea as for Input) —Whenever the control 
procedures flag a data-processing problem, there should be procedures to pul! out 
the item, fix the problem, and then put the Item back in line for the necessary data 
processing. 

C. Output 

1. Objectives— That the output of data (and the distribution of any related reports) is accurate 

and as authorized. 

2. Examples 

a. Control totals (the same idea as for Input and Processing) 

b. Output limits— A predetermined page (or time) limit might be specified; if those limits 
are exceeded, the program can assume an error has occurred and stop the output 
activity. 

c. Error resolution procedures (the same idea as for Input and Processing)— Whenever 
the control procedures flag a data output problem, there should be procedures to pull 
out the item, fix the problem, and then put the Item back in line for proper output. 


248 
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The auditor's evidence gathering procedures may be affected by-ifcqgputerlwd^nj^r^i^ent— 
"auditing through the computj^^ (as opposed to "auditing arounid%ltomputer^,^N"^^ 

After studying this lesson, yoU should bo able to 

1. Understand the costs ai id benefits ass lated with developing generalized audit sott 

customizing software t(ja-specificentii s circumstances 

2. Understand specific procedures that t» auditor Tiay perform in«in II < nc a niii < testielevant 

''■'"^'ddntrols. 


I. Audit Software (Focus Is on Substantive Test Work) —Especially to access the client's files, but may 
also be used to help achieve the audit objectives: 

A. Generalized Software —Canned audit programs to access and test client's files; initially expensive 
to develop, but can be efficient if used on numerous engagements 

B. Customized Software —Programs specifically written to access the files of a particular client; may 
be cheaper in the short run, but more expensive in the long run if such costs are incurred for many 
clients 

C. Data Mining Software —Commercially available software (such as ACL or Idea) can be easily used 
to access client's electronic data and perform a broad range of substantive audit tasks (such as 
performing analytical procedures and sampling for confirmation work) 

H. Procedures Related to Tests of Controls— When those IT-related controls are internal and 
unobservable: 

A. Test Data —Introducing "dummy" transactions under the auditor's control; 

1. Include some known errors to test the client's interna! controls by checking whether the 
client's system catches those known errors. 

2. The auditor need not include every possible type of error; include only those kinds of errors 
that are of interest to the auditor. 

3. But be careful not to contaminate the client's database. 

B. Integrated Test Facility (ITF)— Create a fictitious division or department within the client and 
process the "dummy" data along with the client's "live"data; again, be careful not to contaminate 
the client's actual files. 

C. Parallel Simulation —Processing the client's actual data on the 
auditor's software and then comparing auditor's output to client's 
output for agreement. 

D. Tagging Specific Client Transactions and Tracing Them Through 
the Client's System —Such tagging is analogous to an electronic tag 
attached to an animal in the wilderness so that researchers can follow 
the animal's movement. 

E. Embedded Audit Modules (and audit hooks)—Systems that don't have a permanent audit trail 
require that any auditing occurs while processing take place. 

1. Embedded audit modules—Routines that are built into the application program to perform 
an ongoing audit function. 


Note 

Test data, ITF, and parallel 
simulation test how weif 
die client's systems work 
(after the fact), espetidlly 
in detectirig errors, ^ 
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2. Audit hooks—An exit point that Is built Into the application program where an audit module 
can be added subsequently. 


Note 'H 

Tagging, embedding audit rhody les, and audit hooks test the vtoridhg df thesysteih fehllf 


Note 

Inquiry, observation, and mspection can be used to gather evfdence'about external, observable EOP-related controls that^ 
are nototherwise documented. 








I Jtsonr y9U should bo able to: 

Understand a var^ty of other terms and cc ni epts associated with processing and networking In an 

!T environment. I 


i. Hardware versus Software 

A. Hardware—The central processing unit (CPU) and all the other related equipment. 

B. Software—^The systems programs and all the applications programs: 

1. Operating system —^The set of instructions that runs the CPU and the related peripheral 
equipment. 

2 . Compiler— Translates the source program Into object program; 

a. Source program —Written in a specific programming language (e.g., FORTRAN, COBOL). 

b. Object program —^The instructions in machine readable form. 

II. Modes of Operation—Related to when the transactions are processed: 

A. Batch Processing —When transactions are collected for periodic processing (e.g., daily updates 
for an ATM machine). 

B. Online, Real-Time Processing: 

1. Online— Means that the user is In direct communication with the computer's central 
processing unit (CPU). 

2. Real-time— Means that the data files are immediately updated. 

III. Service Organizations —Independent computer centers may be engaged to process a client's 
transactional data; using such a service organization Is a form of "outsourcing" and represents an 
alternative to having a company's own IT department 

IV. Distributed Systems— Involves a single database, which is literally distributed across multiple 
computers connected by a communication link. In other words, a network of remote computers 
connected to the main system (i.e. a host server) whereby each location can then have input/output, 
processing, and printing capabilities. 

V. Database Systems —A set of interconnected files that eliminates the redundancy associated with 
maintaining separate files for different subsets ofthe.organizatlon; a key concern is limiting the users' 
access to the appropriate parts of the database as authorized. 

Vi. Hierarchical vs. Relational Database Structures 

A. Hierarchical— Data elements at one level encompass the data elements immediately below 
(constructed like a company's organizational chart).These structures are largely outdated, 

B. Relational—An integrated database having the structure of a spreadsheet (where each row 
consists of fields related to a particular customer or item and each column consists of a specific 
information field that is applicable to each customer or Item). 

VII. Networks—Basic definitions 

A. Local Area Network (LAN)—A network of hardware and software interconnected throughout a 
building or campus (usually limited to a few miles In scope). 

B. Wide Area Network (WAN)—A larger version of a LAN that might span a whole city or country. 
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C. Value-Added Network (VAN)—A network that facilitates EDI transactions (see the section on 
e-commerce below) between the buying and selling companies in such transactions, but the VAN 
is maintained by an independent company. 

D. Internet—A worldwide network of privately controlled computers. 

E. Intranet—A local area network that uses internet technology to facilitate communications 
throughout a particular organization (perhaps using a firewall to insulate the organization's 
system from unauthorized, outside entry). 

F. Extranet—Same as intranet, except that important external constituents (e.g., major customers 
or suppliers) are also connected. 

VIII. Electronic Commerce 

A. Electronic Funds Transfer (EFT)— Involves the transfer of monies between financial accounts 
(usually associated with financial Institutions). 

B. Electronic Data Interchange (EDI)— Involves an electronic transaction between companies (one 
is selling, the other is buying). 

1. The usual hardcopy documents (e.g., purchase orders, sales invoices) don’t exist! 

2. The goal is greater efficiency and less paperwork—should result in lower receivable/payable 
balances. 

3. PoInt-to-Point (Point of Sale)Transactions— Involve direct computer-to-computer 
communication between the parties. 

4. Value-Added Network—As indicated above, an Independent company may develop the 
electronic infrastructure to facilitate these electronic business activities (along with support 
services). 

IX. Using the Internet-Security and information reliability remain major concerns, although no direct 
investment is specifically required to engage in e-commerce transactions. Note that the AlCPA 
developed WebTrust as an assurance service to address such concerns for a consumer/buyer. 
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After studying this lesson, you should be able to: 


1. State the Reporting Principle under the clarified standards (and how that compares to the now- 
superseded Reporting Standards of GAAS). 

2. Know the structure and content of the unmodified auditor's report (and how that compares to 

what was previously known as the standard unqualified audit report. 

3. Recognize the various alternative audit reports in addition to the unmodified auditor's report 
introduced here. 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 700, Forming an Opinion 
and Reporting on Financial Sfafemenfs. The standard states that the auditor's objectives are to form 
an opinion on the financial statements based on an evaluation of the audit evidence obtained, and 
express clearly that opinion through a written report. 

II. Principles— Recall that the seven principles identified as a framework for audit standard setting in the 
Clarified Standards include one principle specifically dealing with reporting; 


"Based on an evaluation of the audit evidence obtained, the auditor expresses, In the form of 
a written report, an opinion in accordance with the auditor’s findings, or states that an opinion 
cannot be expressed. The opinion states whether the financial statements are presented fairly, in 
all material respects, in accordance with the applicable financial reporting framework." ' 


ill. Standard Unqualified Audit Report— Prior to the Clarified Standards, the AlCPA auditing standards 
referred to the Standard Unqualified Audit Report—Such an audit report consisted of three 
paragraphs known as the introductory, scope, and opinion paragraphs, as shown below. 


Standard Unqualified Auditor's Report 

Independent Auditor's Report 

We have audited the balance sheets of ABC CompanyarDecember 31,20X2 and 20X1, and the 
related statements of income, retained earnings, and cash flows for the years then ended. These 
financial statements are the responsibility of the Company's management. Our responsibility is to 
express an opinion on these financial statements based on oor audits. 

We conducted our audits in accordance with auditing standards generally accepted in the 

United States of America. Those standards require-that vi/e plan and perform the audit to obtain 
reasonable assurance about whether the financial statements are free of material misstatement. 
An audit includes examining, on a test basis, evidence supporting the amounts and disclosures 
in the financial statements. An audit also includes assessing the accounting principles used ancl 
significant estimates made by management, as well as evaluating the overall financial statement 
presentation. We believe that our audits provide a reasonable basis for our opinion. 

In our opinion, the financial statements referred to above present fairly, in all material respects, 
the financial position of ABC Company at December 31,20X2 and 20X1, and the results of their 
operations and their cash flows for the years then ended, in conformity with accounting principles 
generally accepted in the United States of America. 

/s/CPA firm (signed by audit engagement partner) 

Date (The auditor's report should not be dated earlier than the date on which the auditor has 
obtained sufficient appropriate audit evidence to support the opinion.) 

In the Clarified Standards, the AlCPA has replaced the previous term unqualified with unmodified. 
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IV. Clarifled Standards—Under the AlCPA's Clarified Standards, the auditor's unmodified report has been 
reformatted and expanded to reflect four main sections: 

A. The first section ordinarily has no label, and merely identifies the nature of the engagement and 
the entity's financial statements involved (consisting of one sentence). However, if the auditor's 
report includes a section after the opinion paragraph labeled Report on Other Legal and 
Regulatory Requirements, then the introductory paragraph should be labeled Report on the 
Financial Statements. (Samples of both versions of audit reports are provided below.) 

B. The second section is labeled Management’s Responsibility for the Financial Statements 
(one sentence)—States that management is responsible for the fair presentation of the financial 
statements and the design and implementation of internal control. 

C. The third section is labeled Auditor's Responsibility, which consists of three separate paragraphs. 

1. The first consists of three sentences —(1) responsibility to express an opinion; (2) conducted 
the audit in accordance with (GAAS); and (3) plan and perform the audit to provide reasonable 
assurance. 

2. The second consists of five sentences —(1) perform procedures to obtain audit evidence 
about the amounts and disclosures; (2) the procedures depend on the auditor's judgment, 
including assessment of risks of material misstatement, whether due to fraud or error; (3) in 
making those risk assessments, the auditor considers internal control; (4) auditor expresses 
no such opinion (on internal control, when not engaged to report on internal control in an 
integrated audit); and (5) an audit includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates. 

3. The third consists of one sentence— Expressing the auditor's belief that the audit evidence 
is sufficient and appropriate to provide a basis for the opinion. 

D. The fourth section is labeled Opinion (one sentence)—Expresses the auditor's opinion (in the 
same wording as that used in the previous AlCPA standards). 

E. Signature Block— The AlCPA now requires identification of the CPA's city/state, in addition to the 
signature and date. 

V. Alternative Audit Reports— These various auditor's reports will be discussed in detail in subsequent 
lessons. 

A. Auditor's report includes an emphasis-of-matter paragraph. 

B. Auditor's report includes an other-matter paragraph. - 

C. Auditor Expresses a Qualified Opinion —^The auditor expresses one or more reservations about 
(1) the financial statement presentation (owing to a material departure from the requirements 

of the applicable financial reporting framework); or (2) the audit engagement (owing to a 
scope limitation about a material matter for which the auditor was unable to obtain sufficient 
appropriate audit evidence). . 

D. Auditor Expresses an Adverse Opinion —^The auditor states that the financial statements are not 
fairly stated (as a result of a departure from the requirements of the applicable financial reporting 
framework that is material and pervasive). 

E. Auditor Expresses a Disclaimer of Opinion—A report in which the auditor expresses no 
conclusion about the fairness of the entity's financial statements (due to a scope limitation that is 
material and pervasive). 
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VI. Comparative Financial Statements—The continuing auditor should report appropriately on the 
financial statements of each period presented that the auditor has audited. The type of opinion need 
not be the same for each period. (Sample reports will be provided in connection v^ith specific lessons 
on the various modified audit reports.) 

A. Prior Period Financial Statements Audited by a Predecessor Auditor Whose Report Is not 
Reissued —^The auditor should add an other-matter paragraph stating: (1) that the financial 
statements of the prior period were audited by a predecessor auditor; (2) the type of opinion 
given (and the reason for any modification); (3) the nature of any emphasis-of-matter paragraph or 
other-matter paragraph; and (4) the date of the predecessor's report. 

B. Predecessor's Audit Report on Prior Period Financial Statements is Reissued—^The 
predecessor should obtain a representation letter from the (successor) auditor regarding matters 
that might affect the predecessor's prior period audit report, but the predecessor should not refer 
to the successor auditor in the predecessor's reissued audit report. 

C. Prior Period Financial Statements not Audited 

1, If those financial statements were compiled or reviewed (and the report on the prior period 
financial statements is not reissued)—the auditor should include an other-matter paragraph 
that identifies: (1) the nature of the service performed in the prior period; (2) a description 
of any modifications noted; (3) a statement that the service does not provide a basis for an 
opinion; and (4) the date of the report. 

2. If the prior period financial statements were not audited, reviewed, or compiled — the 
auditor's report should include an other-matter paragraph pointing out that fact. 

VII. Reporting for Audits Conducted In Accordance with PCAOB Standards and GAAS when the Audit 
is not within the PCAOB's Jurisdiction 

A. When conducting an audit in accordance with PCAOB standards and the audit is not within the 
PCAOB's jurisdiction—the auditor must also conduct the audit in accordance with GAAS. 

B. The audit report should follow the PCAOB's format, amended to state that the audit was also 
conducted in accordance with GAAS. 

C. Examples of when an audit might be conducted in accordance with PCAOB standards (although 
not within the PCAOB's Jurisdiction)—audits for clearing agencies and futures commission 
merchants registered with the U.S. Commodities Futures Trading Commission (CFTC) or audits 
required by contract to adhere to PCAOB standards 

VIII. Sample Auditor's Reports Presented Below 

A. Unmodified auditor's report on the current-year (and prior-year) comparative financial statements 
with no reference to legal and regulatory requirements, so the introductory paragraph is not 
separately labeled. 

B. Unmodified auditor's report Is presented on a sentence^y-sentence basis to facilitate the review 

of the contents of such an auditor's report. ' . > 

C. Unmodified auditor's report on the current-year fand prior-year) comparative financial statements 
now including a reference to legal and regulatory requirements, so the introductory paragraph is 
labeled Report on the Financial Statements. 

D. Auditor's report when the audit uses PCAOB Standards, although the audit is not within the 
PCAOB'sjurisdiction. 
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Sample Unmodified Auditor's Rep^iUdder AiCPA Clarified Standards 
(Without Reference to Legal and f^egUlatpry Requirements): 

independent Auditor^ Report 

(Appropriate Addressee) 

We have audited the accompanying consolidated fihanciai statements of ABC Company and its 
subsidiaries, which comprise the consolidated balance sheets as of Decentiber 31,20X1 and 20X0, 
and the related consolidated statements of income, changes in stockholders' equity and cash 
flows for the years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these consolidated 
' financial statements in accordance with accounting principles generally accepted in the United : 
States of America; this includes the design, implementation, and maintenance of internal control 
relevant to the preparation and fair presentation of consolidated financial statements that are free 
from material misstatement, whether due to fraud or error. 

Auditor's Responsibility - 

Our responsibility is to express an opinion on these consolidated financial statements based on 
our audits. We conducted our audits in accordance with auditing standards generally accepted 
in the United States of America. Those standards require that we plan and perform the audit to 
obtain reasonable assurance about whether the consolidated financial statements are free from 
material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and 
disclosures in the consolidated financial statements.The procedures selected depend on 
the auditor's judgment, including the assessment of the risks of material misstatement of 
the consolidated financial statements, whether due to fraud or error. In making those risk 
assessments, the auditor considers internal control relevant to the entity's preparation and fair 
presentation of the consolidated financial statements in order to design audit procedures that 
are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control. Accordingly, we express no such opinion. An audit 
also includes evaluating the appropriateness of accounting policies used and the reasonableness 
of significant accounting estimates made by management, as well as evaluating the overall 
presentation of the consolidated financial statements. 

We believe that the audit evidence we have obtained is suficient and appropriate to provide a 
basis for our audit opinion. , - , 

Opinion . 

In our opinion, the consolidated financial statements referred to above presentfairly, in all 
material respects, the financial position of ABC Company-ah'd its subsidiaries as of December 31, 
20X1 and20XO,andtheresultsofthelroperatlonsandtheircashf!owsfortheyearsthenended1n 
accordance with accounting principles generally accepted in the United States of America. 

: (Auditor's Signature-Firm name, signed by audit engagement partner} 

(Auditor's city and state—This is a new requirement under the Clarified Standards) 

(Datedf the auditor's report—When the auditor has obtained sufficient appropriate audit 
evidence as a reasonable basis forthe opinion.) 
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Standards 


(Presented Sentence by Sentence): 

Independent Auditor's Report 

{Introductory Paragraph) 

1. We have audited the accompanying consolidated finandal statements of ABC Company and its 
subsidiafies, which comprise the consolidated balance sheets as of December 3h 20X1 and 20X0, 
pnd rthe related consolidated statements of income, changes in stockholders'equity and cash 

flow^ for the years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

i Management is responsible for the preparation and fair presentation of these consolidated : 
hnandai statements in accordance with accounting principles generally accepted in the United 
States of America: this includes the design, implementation, and maintenance of internal control 
relevant to the preparation and fair presentation of consolidated financial statements that are free 
from material misstatement, whether due to fraud or error. 

Auditor's Responsibility 

(First of three paragraphs) 

1. Our responsibility is to express an opinion on these consolidated financial statements based on 
our audits. 

2. We conducted our audits in accordance with auditing standards generally accepted in the 
United States of America. 

3. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the consolidated financial statements are free from material misstatement. 

(Second of three paragraphs) 

4. An audit involves performing procedures to obtain audit evidence about the amounts and 
disclosures in the consolidated financial statements. 

5. The procedures selected depend on the auditor's judgment, including the assessment of the 
risks of material misstatement of the consolidated finandal statements, whether due to fraud or 
error. 

6. In making those risk assessments, the auditor consid^ infernal control relevant to the entity's 
preparation and fair presentation of the consolidated ffnancia! statements in order to design audit 
procedures that are appropriate in the circumstance,.but not for the purpose of expressing an 

opinion on the effectiveness of the entity's interpat oantroi. 

7. Accordingly, we express no such opinion: 

8. An audit also includes evaluating the appropriateness of accounting policies used and the : 
reasonableness of significant accounting estimates-made by management, as well as evaluating 

the overail presentation of the consolidated finaricial statements. > 

(Third of three paragraphs) : ^ 

9. We believe that the audit evidence we have obtained is sufficieiit and appropriate to proyide a 
basis for our audit opinion. 

Opinion 

1. in our opinion, the consolidated financial statements referred to above present fairly, in ail 
materia! respects, the financial position of ABC Company and its subsidiaries as of December 31, 
20X1 and 20X0, and the results of their operations and their cash flows for the yearsthen ended in 
accordance with accounting principles generally accepted in the United States of America. 
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Sample Unmodified Auditor's Report Under AlCPA Ciaitfied Standards 
(including Reference to Legal and Regulatory Requirements): 

Independent Auditor's Report 

I (Appropriate Addressee) ■ ^ 

Report on the Financial Statements^ 

We have audited the accompanying consolidated financial statements of ABC Company and its 
I subsidiaries, which cornprise the consolidated balance sheets as of December 31,20X1 and 20X0, 
and the related consolidated statements of income, changes in stockholders'equity and cash 
flows for the years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these consolidated 
financial statements in accordance with accounting principles generally accepted in the United 
States of America; this includes the design, Implementation, and maintenance of internal control 
relevant to the preparation and fair presentation of consolidated financial statements that are free 
from material misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on 
our audits. We conducted our audits in accordance with auditing standards generally accepted 
in the United States of America. Those standards require that we plan and perform the audit to 
obtain reasonable assurance about whether the consolidated financial statements are free from 
material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and 
disclosures in the consolidated financial statements.The procedures selected depend on 
the auditor's judgment, including the assessment of the risks of material misstatement of 
the consolidated financial statements, whether due to fraud or error. In making those risk 
assessments, the auditor considers internal control relevantto the entity's preparation and fair 
presentation of the consolidated financial statements In order to design audit procedures that 
are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control.^ Accordingly, we express no such opinion. An audit 
also includes evaluating the appropriateness of accounting policies used and the reasonableness 
of significant accounting estimates made by management, as wejl as evaluating the overall 
presentation of the consolidated financial statements. . 

We believe that the audit evidence we have obtained fs sufficient and appropriate to provide a 
basis for our audit opinion. 

Opinion 

In our opinion, the consolidated financial statements referred to above present fairly, in all 
material respects, the financial position of ABC Compapy arid its subsidiaries as of December 31, 
20X1 and 20X0, and the results of their operations arid their cash flows for the years then ended in 
accordance with accounting principles generally accepted in the United States of America. 

Report on Other Legal and Regulatory Requirements 

(Theformand content of this section of the auditor's report will vary depending on the nature of the 
duditpr’s Other reporting responsibilities.) 
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(Auditor's signature) r \ . . 

(Auditor's city and state) . 

(Date of the auditor's report) 

’The subtitle Report on the Financlai Statements iy'unnecess.ary In circumstances when the 
second subtitle, Report on Other Legal and Regulatory Requirements, is not applicable. 

^Wheh the auditor has responsibility for expressing an opinion on the effectiveness of internal 
controi in conjunction with the audit of the entity's financial statements, the sentence would 
be stated as follows; "In making those risk assessments, the auditor considers internal control 
relevant to the entity's preparation and fair presentation of the consolidated financial statements 
In order to design audit procedures that are appropriate in the circumstances." In addition, the 
next sentence, "Accordingly, we express no such opinion," would be omitted. 


Sample Audit Report When the Audit Uses PCAOB Standards, Although the Audit Is Not 

. Within the PCAOB's Jurisdiction: 

Report of Independent Registered Public Accounting Rrm 

We have audited the accompanying consolidated balance sheets of ABC Company and subsidiaries 
as of December 31,20X2 and 20X1, and the related consolidated statements of operations, changes 
in stockholders'equity, and cash flows for the years then ended. These consolidated financial 
statements are the responsibility of the Company's management. Our responsibility Is to express.an 
opinion on these consolidated financial statements based on our audits. 

We conducted our audits in accordance with the auditing standards of the Public Company Accounting 
Oversight Board (United States) and in accordance with auditing standards generally accepted in 
the United States of America.Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether the consolidated financial statements are free of material 
misstatement. An audit includes examining, on a test basis, evidence supporting the amounts and 
disclosures In the consolidated financial statements. An audit also includes assessing the accounting 
principles used and significant estimates made by management, as well as evaluating the overall financial 
statement presentation. We believe that our audits provide a reasonable basis for our opinion. 

In our opinion, the consolidated financial statements referred to above present fairly, in all material 
respects, the consolidated financial position of ABC Company and subsidiaries as of December 31, 
20X2 and 20X1, and the results of their operations and tiieir cash flows for the years then ended, in 
conformity with accounting principles generally^accepted in the United States of America. 

(Signature) " ^ 

(City and State or Country) 



This sample report is based on the following circumstances: 

1. The audit of an entity’s consolidated financial statements is not within the jurisdiction of the 
PCAOB; 

2. The audit is conducted in accordance with PCAOB auditing standards and also auditing 
standards generally accepted in the United States; 

3. The auditor has not been engaged to audit internal control over financial reporting; and 

4. The financial statements are prepared In accordance with U.5. GAAP. 
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After studying this you should be able to: 


1. Know the audit report (and review 
Auditing Standards. : 


report) requirement applicable to issuers under PCAOB 


i. References in Auditors' Reports to the Standards of the (PCAOB) 

ii. Standards Adopted 

PCAOB adopted the AlCPA's auditing standards in existence on April 16,2003, as "interim standards, on 

an initial, transitional basis." 

Hi. Required Changes 

Made the following required changes to the auditor's report, relative to the 2003 AlCPA guidelines. The 

AlCPA later changed its reporting model In Its clarified auditing standards. 

A. Title of the Report—Replaced "Independent Auditor's Report" with "Report of independent 
Registered Public Accounting Firm." 

B. Scope Paragraph—Replaced reference to "auditing standards generally accepted in the United 
States of America" with "the standards of the Public Company Accounting Oversight Board 
(United States)." 

C. Opinion Paragraph—Replaced reference to "accounting principles generally accepted in the 
United States of America" with "U.S. generally accepted accounting principles." 

D. Signature—Required firms to add their city and state (or country, as applicable) along with their 
signature and date of their audit report. 

IV. Examples of Reporting Language Specified by PCAOB 


Sample Audit Report Using the PCAOB's Template: Report No. 1 


We'hSve audited the accompanying balance sheets of ABC Company at December 31,20X3 and 20X2, 
and the related statements of operations, stockholders'equity,^cftash flows for each of the three 
years in the period ended December 31,20X3. These financlaj staternents are the responsibility of the 
Company's management, pur responsibility is to express an opihion on these financial statements ; 
based on ouraudits: , , ; 

We cohducted our audits in accordance with the standards of the Public Company Accounting 
Oversight Board (United States),Those standards require thatwe plan and perform the audit to obtain 
reasonable assurance about whether the financial statements &fe free of material misstatement. An 
audit includes examining, on a test basis, evidence supporting-the amounts and disclosures in the 
financial statements. An audit also Includes assessing the accounting principles used and significant 
estirhates made by management, as well as evaluating the overall financial statement presentation. 
We believe that ouraudits provide a reasonable basis for our opinion. 

In pur opinion, the financial statements referred to above present fairly, in all material respects, the 
financia! position of ABC Company at December 31,20X3 and 20X2, and the results of its operations 
and its cash flows for each ofthethree years in the period ended December31,20X3, in conformity 
|:w^ith U.S. generally accepted accounting principles. 

(Signature) 

(Cit;^ and State or Country) 

.(DateV' 
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Sample Review Report Using the PCAOB's Template: Report No. 2 

Re po r t of Independent Registered Public Act^puptmcf Firm 

‘ 11 ' I w ai^u\n\idny\nq{describeiheintenmfinanciaunformattonor•^^ht^mentMWKwea)of 

• c I itipanv < 1 ^ o! September 30,20X3 and 20X2, and forihe three month and > niic month periods 
tiv r endr fJ This interim financial information (statements) is (are) the responsibility of the company s 
management. 

vVecoi'ductKjciurn .1 .v n .icc^'rrLni i with the standards of the Public Company Accounting 
Over* icht hr a' • ' ',i&t»-‘ • A icview of inlfcrim financial information consists principally 

of api ly nj analyiicrt' piorrr)*ircsnnd making inguii los of j^ersons responsible for financial and 
recounting mattcri it j jb^taninlly l(“... in scope than an audit conducted in accordance with the 
standard* of th^ Piiblir Company Ar c ounting Oversight Board, the objective of which is the expression 
ofcinopri.ontr'j rd-iv h» fi . nc i d statements tal-en as a whole Accordingly, we do not express 
such an opinion. r, ‘ 

iPismc o I u .* v' ji not r / .im >>1 dny material modifications that should be made to the 



Note: Effective in 201 7, the PCAOB requires each registered public accounting firm to file with the PCAOB 
its "Form AP, Auditor Reporting of Certain Audit Partjcipants,"for every audit of an issuer. This Form AP 
requires disclosure of the following: 

1. The engagement partner's name; 

2. The name, location, and extent of participation of any other accounting firm whose participation 
in the audit accounts for 5% or more of the total audit hours; and 


3. The number and extent in total of all other accounting firms whose participation in the audit 
accounts for less than 5% of the total audit hours. ^ - 

These Form APs will be accessible on the PCAOB's website. 
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Audits of Group Financial Statements 


After studying this lesson, you should be able 1^1:; 

1. Know how a reference to a component auditor affeds^Wauditor's repor^^^ 

2. Understand the difference between a cornfk>rjentahd:a group;arid distinguish between the 

group's auditor and a component auditor. ' ; . v • 


I. Relevant AlCPA Guidance —The relevant AlCPA guidance is provided by AU 600, Special 
Considerations—Audits of Group Financial Statements (Including the Workof Component Auditors). 

The standard states that the auditor's objectives are to determine whether to act as the auditor of 
the group financial statements, and, If so, (1) to determine whether to make reference to the audit 
of the component auditor; (2) to communicate clearly with component auditors; and (3) to obtain 
sufficient appropriate audit evidence regarding the financial information of the components and the 
consolidation process to express an opinion on the group financial statements. 

II. Selected Definitions 


Definitions 

Component. An.entity for which group or component management prepares financial Information that is 
required by the applicable financial reporting framework to be included in the group financial staterhents. 

Component Auditor: An auditor who performs work on the financial information of a component that .; 
will be used as audit evidence for the group audit (A component auditor may be part of the group 
engagement partner's firm, a network-affiiiated firm, or another unrelated firm.) 

Group: All the components whose financial Information Is Included in the group financial statements. 

A group always has more than one component 

Grpdp Financial Statements: Financial statements that include thfe financial information of more than 
OheeohiponentThls term also refers to combined financial statements aggregating the financial 
Information prepared by components that are under common control. 

Grdup-Wlde Controls: Controh designed, implemented, and maintained by group management over 
group financial reporting. 

Significant Component A component identified by the grpup engagement team that (q) is of individual 
financiai significance to the group; or (b) due to Its sp^lficfiature, is likely to include sighificartt risks of 
material misstatement ofthe group financial Statements; _ \ : 


III. Responsibilities of the Group Engagement Partner and the Group Engagement Team 

A. Group Engagement Partner —The group engagement partner is responsible for (1 ) the 
supervision and performance of the group audit engagement in compliance with professional 
standards and applicable regulatory requirements; and (2) determining whether the auditor's 
report is appropriate in the circumstances. 

B. Acceptance and Continuance —The group engagement team should obtain an understanding of 
the group, its components, and their environments sufficient to identify the significant components. 

1. The group engagement partner should evaluate whether sufficient appropriate audit 
evidence will be obtained, including the use of the component auditors'work, to act as the 
auditor of the group financial statements. 

2. If sufficient appropriate audit evidence would not be obtained, the auditor should not accept 
a new engagement or should withdraw from a continuing engagement. (If withdrawal is not 
permitted, the auditor should disclaim an opinion.) 
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C. Assess the Risks of Material Misstatement of the Group Financial Statements—The auditor 
should obtain an understanding of the group, its components, and their environments (including 
group-wide controls) and obtain an understanding of the consolidation process and the 
instructions issued by group management to components. 

D. Obtain an Understanding of the Component Auditor{s) 

1. Recall that the term component auditor applies to auditors of other offices of the group 
engagement partner's firm (for an engagement involving multiple offices of the same firm), 
to a network-affiliated firm, or to another unrelated firm (that is not subject to the quality 
controls of the group engagement partner's firm). 

2. The group engagement team should obtain an understanding of (a) the component auditor's 
independence and professional competence; (b) the extent to which the group engagement 
team will be involved in the work ofthe component auditor; (c) whether the group 
engagement team will be able to obtain information affecting the consolidation process from 
the component auditor. 

E. The group engagement team should determine materiality (1) for the group financial statements 
as a whole, (2) for the components to be audited by the group engagement team or by 
component auditors, and (3) the threshold for determining clearly trivial to the group financial 
statements. 

F. Responding to Assessed Risks— If work to be performed on the consolidation process or the 
financial information ofthe components is based on an expectation that group-wide controls are 
operating effectively, the group engagement team (or the component auditor) should test the 
operating effectiveness of those controls. 

G. Consolidation Process— The group engagement team should perform further audit procedures 
on the consolidation process to respond to the assessed risks of material misstatement associated 
with the consolidation process, including evaluating whether all components have been included 
and whether there are any indicators of possible management bias or fraud. 

H. Communications with a Component Auditor— The group engagement team should 
communicate its requirements ofthe component on a timely basis, and request that the 
component auditor communicate matters relevant to the group engagement team's conclusions. 

I. Involvement In the Work of the Component Auditors— For a significant component for which 
the auditor ofthe group financial statements is assuming responsibility for the component 
auditor's work, the auditor should (a) discuss with the component auditor the significance of 
the component to the group and the susceptibility ofthe component to material misstatement; 
and (b) review the component auditor's documentation of identified significant risks of material 
misstatement to the group financial statements. , 

J. Documentation— The group engagement team's audit documentation should include the 
following: 

1. An analysis of components indicating those-that are significant (and the type of work 
performed); 

2. Written communications between the group engagement team and the component auditors 
about the group engagement team's requirements; 

3. Those components for which reference to the component auditors' reports were made in the 
auditor’s report; and 

4. The financial statements ofthe component and the report of the component auditor for 
components referenced in the auditor's report on the group financial statements. 

K. Determining Whether to Reference a Component Auditor In the Auditor's Report 

1. Reference to the component auditor should not be made unless: (a) the component's financial 
statements are prepared using the same financial reporting framework used by the group; (b) 
the component auditor has performed an audit on the component's financial statements in 
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accordance with GAAS (or PCAOB standards, if applicable); and (c) the component auditor 
has issued an audit report on the component's financial statements that is not restricted 
as to use. 

2. if the group engagement partner decides to assume responsibility for the component 
auditor's work —No reference should be made to the component auditor in the auditor's 
report. 

3. if the group engagement partner decides to name the component auditor in the 
auditor's report —^The component auditor's permission should be obtained and the 
component auditor's report should be presented along with the auditor's report on the group 
financial statements. 

L. Effect of Reference to a Component Auditor on the Auditor's Report 

1. No effect on the introductory paragraph or management's responsibility section. 

2. Auditor's responsibility section —^The first paragraph should be modified to identify 
the component audited by other auditors and the magnitude of the financial statements 
involved. 

3. The opinion paragraph should refer to "In our opinion, based on our audit and the report of 
the other auditors,..." 

M. Sample Report that Refers to a Component Auditor 


Independent Auditor's Report 

(Appropriate Addressee) 

Report on the Consolidated Financial Statements 

We have audited the accompanying consolidated financial statements of ABC Company and its, 
subsidiaries, which comprise the consolidated balance sheets as-of December 31,20X1 and 20X0, and 
the related consolidated statements of income, changes in stockholders'equity and cash flows forthe 
years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentetipn of these consolidated financial 
statements in accordance with accounting principles generally'accepted in the United States of 
America; this includes the design, implementation an?l rnairjtenafice of internal control relevant to 
the preparation and fair presentation of consolidated finatldal statements that are free from material 
misstatement, whetherdue to fraud or error. ^ 

Auditor's Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on our 
pdit We did not audit thefinancial statements of B Company, a wholly-owned subsidiary, 
whose statements reflect total assets and revenues constituting 20% and 22%, respectively, 
of the related consolidated totals. Those statements were audited by other auditors, whose 
report has been furnished to us, and our opinion, insofar as it relates tO the amountsIncluded 
for B Company, IS based solely on the report of the other auditors. We conducted our audits 
in accordance with auditing standards generally accepted inthe United States of America. Those 
standards require that we plan and perforrn the audit to obtain reasonable assurance about whether 
the consolidated financial statements are free from materia! misstatement 

An audit involves performing procedures to;obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
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including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
interna! control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's interna! control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 

rt-oiioblciicssof sicjiiiluani .Kcountingestimiilesmidi-byni m ’i. .r > 
r, ...'fluaiimj ttie overall presentation of the t on^olidated finamial ‘.i.ilenvni' 

Ai- b'''i‘- »hat the audit evid* in e wo liavt obt.iiiKd is ‘uffuu-nl .inilappi.MV'.'ielo provide a bas.' 
for our audit opinion. 

h II- Ml ii based on our audit and the report of the other auditoi s ih i. .i.lM.. ^dfmancul 

statements referred to above presents fairly, in all material respects, the financial position of ABC 
Company and its subsidiaries as of December 31,20X1 and 20X2, in accordance with accounting 
principles generally accepted in the United States of America. 

(Auditor's Signature) 

(Auditor's City and State) , ' 

' (Date of the Auditor's Report) 







After studying this lesSQiv you should be able to; 

1. Know the definition of^and distinction between) emphasis-of-matter and other Tiattei paiaqiaphs 
in the auditor's t<?poft 

2. Know the thi^inatters for which ah emphWisi^’Watter paragraph is required 

3. Knovyihow ah emphasis-of-matter and/or pthef-rhatter paragraph;Vvould‘be presented in the 
auditor's report. 


I. Responsibilities under AlCPA Professional Standards—^The relevant AlCPA guidance is provided 
by AU 706; Emphasis-of-Matter Paragraphs and Other-Matter Paragraphs in the Independent Auditor's 
Report. This pronouncement states that the auditor's objective is to draw the users'attention, as 
necessary, to ( 1 ) a matter, already appropriately presenteddisclosed in the financial statements, that 
is important to the users' understanding of the financial statements (emphasis-of-matter paragraph); 
or ( 2 ) any other matter that is relevant to the users'understanding of the audit, the auditor's 
responsibilities, or the auditor's report (other-matter paragraph). 


Definitions ■■ 

MmphasIs-of-Matter Paragraph: A paragraph that refers t^'fr®er appropriately presented of 
disclosed In the financial statements that, In the auditor's Judgment, Is bfsuch importance that it ^ 
;fuhdamental to users' understanding of the financial statements. 

Other-Matt& Paragraph: A; paragraph that refers to a matter other than those presented or disclosed 
in the financial statements that, in the auditor's judgment, is relevant to users'understanding of ihe 
audit, the auditor's responsibilities, orthe auditor's report. 3 ^. 


li. Emphasis-of-Matter Paragraph 

A. Matters for which an emphasis-of-matter paragraph is required: 

1. When the auditor has substantial doubt about the entity's ability to continue as a going 
concern 

2. When there is an inconsistency in accountingprinciples used 

3. When the financial statements are prepared in accordance with special purpose frameworks. 
(This topic will be discussed in another lesson.)., ' 

B. Circumstances for which an auditor may consider it necessary to add an emphasis-of-matter 
paragraph: ( 1 ) an uncertainty as to the outcome of unusually important litigation or regulator 
action; (2) a major casualty having a significant effect; (3) significant transactions with related 
parties; or (4) unusually Important subsequent events. 

C. Presentation of the emphasis-of-matter paragraph: 

1. Presented immediately after the opinion paragraph 

2. Should have an appropriate heading, such as "Emphasis of Matter" 

3. Should reference the specific matter being emphasized and Identify where relevant 
disclosures can be found in the financial statements 

4. State that the auditor's opinion is not modified with respect to the matter emphasized. 

D. Example of such a paragraph for a going-concern issue: 
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Emphasis-of-Matter f^s-sented niter the opinion parnyra[)h): 

The accompanying financial statements have been prepared assuming that the Company will 
continue as a going concern. As discussed in Note X to the financial statements, Ae Company has 
suffered recurring losses from operations and has a net capital deficiency that t^ise substantial doubt 
about its ability to confihue as a going concern; Management's plans in regard to-these matters are 
also described in Note^-X.The financial statements do not indudeany adjustmenU that might result 
from the outcome of this uncertainty. Our opinion Is not modified with respecttp^this matter. 


lii. Other-Matter Paragraph 

A. Circumstances for which an Auditor May Consider it Necessary to Add an Other-Matter 


1, Relevant to users'understanding of the audit —In rare situations, the auditor may add an 
other-matter paragraph to explain why it was not possible for the auditor to withdraw from 
an engagement in which a scope limitation that was pervasive resulted in a disclaimer of 
opinion. 

2. Relevant to users' understanding of the auditor's responsibilities or the auditor s 
report —For example, when the opinion expressed on the prior year's financial statements is 
different than the opinion previously expressed (as a result of management s correction of a 
material departure from the applicable financial reporting framework). 

B. Presentation of the Other-Matter Paragraph 

1. When the other-matter paragraph is intended to draw users' attention to a matter relevant 
to their understanding of the audit of the financial statements—The other-matter paragraph 
should be presented immediately after the opinion paragraph and after any emphasis-of- 
matterparagraph(s). 

a. When the other-matter paragraph is intended to draw users' attention to a matter 
relating to other reporting responsibilities addressed In the auditor's report—^The 
paragraph may be included in the section of the report labeled "Report on Other Legal 
and Regulatory Requirements." 

b. When relevant to ail the auditor's responsibilities or users' understanding of the 
auditor's report— The other-matter paragraph may also be included as a separate 
section following the "Report on the Financial Statements" and the "Report on Other Legal 
and Regulatory Requirements." 

2. Should have an appropriate heading, such a 5 -"Other Matter." 

C, Example of such a paragraph when the opinion expressed on the prior year's financial statements 

is different than the opinion previously expressed: - 


Otli^Matter after the opinion and ^^ha^s-o^matter paragraph^; 

In our report dated March, t; 20X1, we expressed an opinion that the 20X0 financial statements did 
hot fairly present the financial position, results of operations, and cash flows of ABC Company in , 

aCGordahcewith accounting principles generaljy accepted in theUnited States of America becayse --. - 
of two departures from such principles; (1) .ABC Company carried its property, plantiahd eqy iprpeht vM 
at appfaisai values, and provided for depredatipn Qnfhe^l^sis of such values, and {2} ABC Cbtppany;^ 
did not provide for deferred income taxes wil^fespedt td .difterences between income fpf finandah / f 

rep6^t^ng purposes and taxable income. As described in NbteX%:Cohipany .has 
of accdumihg for these items and restated its 20Xdfinaridai statem;ehfe^ 

prihdples generally accepted in the pnited^^tesdf America; Accbrdihglyi our 

the restated 20X0 financial statement^ as pr^ttted.herein, isdifferent from that expressed 

previous report^is® ' , . 
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IV. Communication with Those Charged with Governance —The auditor should communicate with 
those charged with governance about the proposed wording of any expected emphasis-of-matter or 
other-matter paragraph(s). 


l^e StafeTOehts pn Auditing Standards that preceded the darified auditing standards used the tei^^^artfltory paragmph 
in a variety ofcontexts/including emphasis of a matter and expiating the basis for an opinion thaJ i^^ther tHan^^ \ ^ 
-t{hquape<J.>Spmetim^ paragraph preceded die opinion, sometimes itfollowedfi^^^pniph> and iri some 

circumstances the auditor had a choice to place the explanatory paragraph either before or after paragraph. 

JUnderthe^parifey^audltihg standards, the teihi explanatory paragraph is no longer used. 
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After studying this lesson, you should be able to: 

1. Understand when and how to express a qualified audit opinion for a scope limitation affecting the 
auditor's basis for conclusions. 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 705, Modifications to 
the Opinion in the independent Auditor's Report. The standard states that the auditors objective is to 
express clearly an appropriately modified opinion when (1) the auditor concludes that the financial 
statements as a whole are misstated; or (2) the auditor is unable to obtain sufficient appropriate 
audit evidence to conclude that the financial statements as a whole are free from material 
misstatement. This lesson focuses on the second matter, which is known as a scope limitation. 


Definitions 

Modified opinion: A qualified opinion, an adverse opinion, or a disclainiiei;:bf opinion. 

Pervasive: ia) Effects that are not confined to specific elements, accounts or it§ms of the fihanci?!! 
statements; (b) effects that, if so confined, represent or could represent a.substantial proportion 
the financial statements; or (c) regarding disclosures, are fundameritaj to users'understanding pf the 
financial statements. - .r - .^ 


II. Opinion Scope Limitation Involves Judgment 

A. Qualified Opinion— The auditor should express a qualified opinion when the auditor is unable to 
obtain sufficient appropriate audit evidence, and the auditor concludes that the possible effect on 
the financial statements, if any, could be material, but not pervasive. (This lesson focuses on the 
qualified opinion in connection with a scope limitation.) 

B. Disclaimer of Opinion— The auditor should express a disclaimer of opinion when the auditor 
is unable to obtain sufficient appropriate audit evidence, and the auditor concludes that the 
possible effect on the financial statements, if any, could be material and pervasive. (A separate 
lesson focuses on the disclaimer of opinion.) 

III. Circumstances Resulting in a Scope Limitation . - 

A. Circumstances beyond the Control of the Entity— For example, the entity's accounting records 
have been destroyed. 

B. Circumstances Related to the Nature or Timing of the Auditor's Work— For example, the 
auditor determines that substantive procedures alone are not sufficient and the entity's controls 
are ineffective; the auditor is unable to obtain audited financial statements of an investee 
(accounted for using the equity method); or the timing of the auditor's appointment does not 
permit the auditor to observe the physical counting of inventories. 

C. Limitations Imposed by Management— For example, management prevents the auditor from 
requesting external confirmation of certain account balances.The auditor should request that 
management remove any such limitation. 

1 . if management refuses—the auditor should communicate the matter to those charged with 
governance and determine whether it is possible to perform alternative procedures to obtain 
sufficient appropriate audit evidence. 

2. If unable to obtain sufficient appropriate audit evidence (and if the effects could be both 
material and pervasive)—the auditor should withdraw from the audit (when practicable) or 
issue a disclaimer of opinion. 
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Effect of a Qualification for a Scope Limitation on the Auditor's Report 

A. No effect on the introductory paragraph or management's responsibility section. 

B. Auditor's responsibility section— ^Modily the last sentence to state,"We believe that the audit 
evidence we have obtained is sufficient and appropriate to provide a basis for our qualified audit 
opinion." 

C. Add a "Basis for Qualified Opinion" paragraph (with such a label) before the opinion paragraph. 

D. Qualify the opinion using appropriate language such as: "In our opinion, except for the possible 
effects of the matter described in the Basis for Qualified Opinion paragraph, the financial 
statements referred to above present fairly ..."and label the opinion paragraph "Qualified 
Opinion," 

Sample Audit Report Qualified for a Scope Limitation 
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independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying finandal statements pf ABC Company, which comprise 
the balance sheetas of December 31,20X1, and the related statements of income, changes in ^ 
stockholders'equity and cash flows for the year then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Finandal Statements 

lyianagement is responsible for the preparation and fair presentation of these financial statemehts 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of internal control relevant to the preparation ■ 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility Is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America.Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements.The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated finandal 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also Includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the financial statements. 

We believe that the audit evidence we have obtained Is sufficient and appropriate to provide a basis 
for our qualified audit opinion. 

Basis for Qualified Opinion 

ABC Company's investment in XYZ Company, a foreign affinate acquired during the year and 
accounted for under the equity method, is carried at $x>a on the balance sheet at December 31,20X1, 
and ABC Company's share of XYZ Company's net Incorhe of $xxx Is included in ABC Company's net 
income for the year then ended. We were unableto obtain sufficient appropriate audit evidence about 
the carrying amount of ABC Company's investment In XYZ Company as of December 31,20X1 and 
ABC Company's share of XYZ Company's net Income for the year then ended because we were denied 
access to the finandal information, management ahd.the auditors of XYZ Company. Consequently, we 
were unable to determine whether any adjustmentji fo these amounts were necessary. 

Qualified Opinion 

in our opinion, except for the possible effects of the matter described in the Basis for Qualified Opinion 
paragraph, the financial statements referred to above present fairly, in aM material respects, the 
financial positionof ABC Company as of December 31,20X1, and the results of its operations and its 
cash flows for the year then ended in accordance with accounting principles generally accepted in the 
United States of America. 

(Auditor's signature) • 

(Auditor's city and state) 

(Date of the auditor's report) 
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Qualified for 


Understand when 
inadequate disdos 



jialified audit opini| 
jsentation of an 





i. Relevant AICPA Guidance —^The relevant AlCPA guidance Is provided by AU 705, Modifications to 

the Opinion in the independent Auditor's Report. The standard states that the auditor's objective is to 
express clearly an appropriately modified opinion when (1) the auditor concludes that the financial 
statements as a whole are misstated; or (2) the auditor is unable to obtain sufficient appropriate audit 
evidence to conclude that the financial statements as a whole are free from material misstatement. 
(This lesson focuses on the first matter, since the scope limitation is discussed in a separate lesson.) 

Modified Opinion: A qualified opinion, an adverse opinion, or a disclaimer of opinion. 

Per/asive (a; Effects that are not confined to specific elements, accounts, or items of the financial 
statements, (b) effects that if so confined, repre^iit or could represent a substantial proportion of 
the financial statements, or (c) regarding disclosures,, are fundamental to user^understanding of the 
financial statements. 


fi. Opinion Choice for a Misstatement (Including Inadequate Disclosure) Involves Judgment 

A. Qualified Opinion— The auditor should express a qualified opinion when the auditor concludes 
that misstatements are material, but not pervasive to the financial statements. 

B. Adverse Opinion— The auditor should express an adverse opinion when the auditor concludes 
that misstatements are material, and pervasive to the financial statements. (A separate lesson 
focuses on the adverse opinion.) 

III. Effect of a Qualification for a Misstatement on the Auditor's Report 

A. No effect on the introductory paragraph or management's responsibility section 

B. Auditor's Responsibility Section —Modify the last sentence to state, "We believe that the audit 
evidence we have obtained Is sufficient and appropriate ter provide a basis for our qualified audit 
opinion." 

C. Add a "Basis for Qualified Opinion" paragraph {with such a label) before the opinion paragraph. 

The auditor should include a description and quantification of the financial effects of the 
misstatement (when practicable); likewise, the auditor shpuld include the omitted information 
(when practicable). . 

D. Qualify the opinion using appropriate language such as: "In our opinion, except for the effects of 
the matter described in the Basis for Qualified Opinion paragraph, the financial statements 
referred to above present fairly.. ."and label the opinion paragraph "Qualified Opinion." 

IV. Sample Audit Report Qualified for a Misstatement 
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Forming Conclusions and Reporting 



Independent Auditor's Report 

(Appropriate Addressee) :v; 

We have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of income, changes in 
stockholders'equity and cash flows for the year then ended, and the related notes to the finanda! o 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, Implementation, and maintenance of internal control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's Judgment, 
Including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our qualified audit opinion. 

Basis for Qualified Opinion ^ ' 

The Company has stated inventories at cost In the accompanying balance sheets. Accounting 
principles generally accepted in the United Statesof Arnerlca require inventories to be stated at the. 
lower of cost or market. If the Company stated inventories at the lower of cost or market, a write 
down of $xxx and $xxx would have been required as of December 31,20X1 and 20X0, respectively. = 
Accordingly, cost of sales would have been increased by $xxX and $xxx, and net Income, Income taxes, 
and stockholders'equity would have been reduced ,b>r$x>o(,.$xxx, and $xxx, and $xxx, $xxx, and $xxx, 
as of and for the years then ended in accordance wltb accounting principles generally accepted In the : 
United States of America. <■ ' . 

Qualified Opinion 

In our opinion, except for the effects of the matter described in the Basis for Qualified Opinion 
paragraph, the financial statements referred to above present fairly, in all material respects, the 
financial position of ABC Company as of December 31,20X1 and 20X0, and the results of its operatidns 
and its cash flows for the years then ended in accordancewltb accounting principles generally 
accepted in the United States of America, ; 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) I 
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1. Understand how to exj.tess an adverse audit opinion 
causes an entity's finah iaUtater)>ent presentation id 



peryasive rnisstate^ 


I. Relevant AlCPA Guidance —The relevant AlCPA guidance Is provided by AU 705, Modifications 
to the Opinion in the Independent Auditor's Report. The standard states that the auditor's objective 
is to express clearly an appropriately modified opinion when (1) the auditor concludes that the 
financial statements as a whole are misstated; or (2) the auditor is unable to obtain sufficient 
appropriate audit evidence to conclude that the financial statements as a whole are free from 
material misstatement. (This lesson focuses on the first matter, since the scope limitation is discussed 
elsewhere.) 


^p^$d dp<n/on A quail 


jipinibfi^h'a^yerse^bpihic^n^^r a 

Pervasive- (a) Effects that a|Enbt-c6nfined;tdspa^^^^K^/l^^^^fci'tbth® 
statements, (b) effects so confined; repfesb^^^^^ie^^^Ssubstantial prbbbrtior c' 
the finanp^l statements 9|{ic|reg^rdingdisctpsd^^^Whdam^t3Wusers'urtdeHtbnSM| bfthe 
financial Statements. 


II. Opinion Choice for a Misstatement (Including Inadequate Disclosure) Involves Judgment 

A. Qualified Opinion— The auditor should express a qualified opinion when the auditor concludes 
that misstatements are materia!, but not pervasive to the financial statements. (A separate lesson 
focuses on the qualified opinion.) 

B. Adverse Opinion— The auditor should express an adverse opinion when the auditor concludes 
that misstatements are material, and pervasive to the financial statements. 

III. Effect of an Adverse Opinion on the Auditor's Report 

A. No effect on the introductory paragraph or management's responsibility section. 

B. Auditor's responsibility section—modify the last sentence to state, "We believe that the audit 
evidence we have obtained Is sufficient and appropriate to provide a basis for our adverse audit 
opinion." 

C. Add a "Basis for Adverse Opinion" paragraph (with such a label) before the opinion paragraph. The 

auditor should include a description and quantification of the financial effects of the misstatement 
(when practicable); likewise, the auditor should include tHe omitted information (when 
practicable). , „ " 

D. Express the adverse opinion using appropriate language such as:"In our opinion, because 
of the significance of the matter discussed in the Basis for Adverse Opinion paragraph, 
the financial statements referred to above do not present fairly ..and label the opinion 
paragraph "Adverse Opinion." 

IV. Sample Audit Report with an Adverse Opinion for Misstatement 
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Forming Conclusions and Reporting 


Independent Auditor's Report 

{Appropriate Addressee) 

We haveepdited accompanying consolidated financial statements of ABC Company and its 
subsidiafiesi which comprise the consolidated balance sheets as of December 31,20X1, and the 
related consolidated statements of Income, changes in stockholder' equity and cash flows for the year 
then ended, and the related notes to the financial statements. 

IVIanagement's Responsibility for the Financial Statements 

responsible for the preparation and fair presentation of these consolidated financial 
statements in accordance with accounting principles generally accepted in the United States of. 
America; this Includes the design, implementation, and maintenance of Internal control relevant to / 

: the preparation and fair presentation of consolidated financial statements that are free from material 
, misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility Is to express an opinion on these consolidated financial statements based on our 
audit We conducted our audit in 'accordance with auditing standards generally accepted In the United 
States of America. Those standards require that we plan and perform the audit to obtain reasonable 
assurance about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity’s internal control Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the consolidated financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our adverse audit opinion. 

Basis for Adverse Opinion 

As described in Note X, the Company has not consolidated fKe financial statements of subsidiary XYZ 
Company that it acquired during 20X1 because it has hot yet been able to ascertain the fair values 
of certain of the subsidiary's material assets and liabilities at the acquisition date. This investment 
is therefore accounted for on a cost basis by the Company. Under accounting principles generally 
accepted in the United States of America, the subsidiary should have been consolidated because 
: it is controlled by the Company. Had XYZ Company b^n consolidated, many elements in the ; V; 
accompanying consolidated financial statements Would have been materially affected.The effects oh \ 
the consolidated financial statements of the falluteYb consolidate have not been determined. ■ r 

Adverse Opinion 

In our opinion, because of the significance of the matter discussed in the Basis for Adverse Opinion 
paragraph, the consolidated financial statements referred to above do not present fairly the financial; 
position of ABC Company and its subsidiaries as of December 31,20X1, or the results of their , 
operations or their cash flows for the years then ended. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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Disclaimer 



After studying this lesson, you should be able to: 

1 . :rr:(' 1.1 d ‘i(;vV lo' xptHssii dr.clc^iinii't ol opinion foi n scopu iimilation whon the |)ossiblc ofTo>'> 

are viewed as material and pervasive. 


1. Relevant AlCPA Guidance —The relevant AlCPA guidance Is provided by AU 705, Modifications to 
the Opinion in the Independent Auditor's Report. The standard states that the auditor's objective is to 
express clearly an appropriately modified opinion when (1) the auditor concludes that the financial 
statements as a whole are misstated; or (2) the auditor Is unable to obtain sufficient appropriate audit 
evidence to conclude that the financial statements as a whole are free from material misstatement. 
This lesson focuses on the second matter, which Is known as a scope limitation. 


. -ss-K-r'- i-^'Ss3S'i2^uag@5f;v 


Definitioiis . 

Modified Opinion: A qualified opinion, an^dverse opInlorT, of a dlsclairh^r ofopinlon. 


.. . 




Pervasive: Effects that are not confined to specific elements, accourits, or ifems of the financial 
statements; (b) effects that, if so confined, representor could represents -ubstantial proportion of 
thefinandal statements; or (c) regarding disclosures, are fundamental to usei s'understanding of the 
financial statements. ' 




n. Opinion Choice for a Scope Limitation Involves Judgment 

A. Qualified Opinion —The auditor should express a qualified opinion when the auditor is unable 
to obtain sufficient appropriate audit evidence, and the auditor concludes that the possible effect 
on the financial statements, if any, could be material, but not pervasive. (Another lesson focuses on 
the qualification for a scope limitation.) 

B. Disclaimer of Opinion —^The auditor should express a disclaimer of opinion when the auditor 
is unable to obtain sufficient appropriate audit evidence, and the auditor concludes that the 
possible effect on the financial statements, if any, could be material and pervasive. 

ill. Circumstances Resulting in a Scope Limitation 

A. Circumstances beyond the Control of the Entity —For example, tlie entity's accounting records 
have been destroyed. 

B. Circumstances Related to the Nature or Timing of the Auditor's Work —For example, the 
auditor determines that substantive procedures alohe are not sufficient and the entity's controls 
are ineffective; the auditor is unable to obtain audited financial statements of an investee 
(accounted for using the equity method); or the timing pf the auditor's appointment does not 
permit the auditor to observe the physical counting df Inventories. 

C. Limitations Imposed by Management— For example, management prevents the auditor from 
requesting external confirmation of certain account balances. The auditor should request that 
management remove any such limitation. 

1. If management refuses—^The auditor should communicate the matter to those charged with 
governance and determine whether It is possible to perform alternative procedures to obtain 
sufficient appropriate audit evidence. 

2. If unable to obtain sufficient appropriate audit evidence (and if the effects could be both 
material and pervasive}—^The auditor should withdraw from the audit (when practicable) or 
issue a disclaimer of opinion. 

IV. Effect of a Disclaimer of Opinion on the Auditor's Report 

A. Minor effect on the introductory paragraph ("We were engaged to audit...") and no effect on the 
management's responsibility section. 
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Forming Conclusions and Reporting 


B. Auditor's responsibility section—Revise this section to consist of the following two sentences: 

"Our responsibility is to express an opinion on these financial statements based on conducting the 
audit in accordance with auditing standards generally accepted in the United States of America. 

Because of the matter described In the Basis for Disclaimer of Opinion paragraph, however, 
we were not able to obtain sufficient appropriate audit evidence to provide a basis for an 
audit opinion." 

C. Add a "Basis for Disclaimer of Opinion" paragraph (with such a label) before the opinion paragraph. 

D. Disclaim an opinion using appropriate language such as: "Because of the significance of the 
matter described in the Basis for Disclaimer of Opinion paragraph, we have not been able 
to obtain sufficient appropriate audit evidence to provide a basis for an audit opinion. 
Accordingly, we do not express an opinion on these financial statements." 

Add an appropriate title preceding the paragraph, such as "Disclaimer of Opinion." 

V. Sample Audit Report with a Disclaimer of Opinion for a Scope Limitation 


Independent Auditor's Report 

(Appropriate Addressee) 

We were engaged to audit the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of income, changes in 
stockholders'equity and cash flows for the year then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of Internal control relevant to the preparation 
and fair presentation of financial statements that are free from materia! misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on conducting the 
audit in accordance with auditing standards generally accepted in the United States of America. 

Because of the matter described in the Basis for Disclaimer of Opinion paragraph, however, we 
were hot able to obtain sufficient appropriateaudit evidence to provide a basis for an audit 
opinion. 

Basis for Disclaimer of Opinion ■ ' 

The company's investment in XYZ Company, a joint venture,1s carried at $xxx on the Company's 
balance sheet, which represents over 90%of thd Comf^any's net assets as of December 31,20X1. We 
were not allowed access to the management and the auditors of XYZ Company. As a result, we were 
unable to determine whether any adjustments were necessary relating to the Company's proportional 
share of XYZ Company's assets that it controls jointly. Its proportional share of XYZ Company's: 
liabilities for which it is Jointly responsible, its proportional share of XYZ Company's income and 
expenses for the year, and the elements making up the statements of changes in stockholders'equity 
and cash flows. 

Disciaimer of Opinion 

Because of the significance of the matter described in the Basis for Disclaimer of Opinion 
paragraph, we have not been able to obtain sufficient appropriate audit evidence to provide 
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Disclaimer of Opinion 


cl basis for an audit opinion. Accordingly, we do not express an opinion on these financial 
statements. 



After studying this lesson/ you should be able to: 

1. Identify how the auditor's report should address a materia) Inconsistency in the financial 

statements caus^ bya change in accounting principle or a correction of previously issued financial 
statements. - ’ " - ' ' 


I. Relevant AlCPA Guidance—The relevant AlCPA guidance Is provided by AU 708, Consistency 
of Financial Statements. The standard states that the auditor's objectives are to (1) evaluate the 
consistency of the financial statements for the periods presented; and (2) communicate appropriately 
in the auditor's report when comparability has been materially affected (a) by a change in accounting 
principle or (b) by adjustments to correct a material misstatement in previously issued financial 
statements. 

II. Evaluating Consistency 

A. The auditor should evaluate whether the comparability between periods has been affected by 
either a material change in accounting principle or a material restatement of financial statements. 

B. When the Auditor's Opinion Covers Two (or More) Periods— The auditor should evaluate the 
consistency between such periods, as well as the consistency of the earliest period covered by the 
auditor's opinion with the prior period. 

C. Change in Accounting Principle 

D. The auditor should evaluate a change in accounting principles about four matters: 

1. Whether the adopted principle is in accordance with the applicable financial reporting 
framework: 

2. Whether the method of accounting for the effect of the change is in accordance with the 
applicable financial reporting framework; 

3. Whether the disclosures about the change are adequate; and 

4. Whether the entity has justified that the alternative adopted Is preferable. (The issuance 
of an accounting pronouncement that requires or expresses a preference for an accounting 
principle is considered sufficient justification for a change in principle.) 

E. When Those Four Criteria are Met (and the Change a Material Effect on the Financial 
Statements)— The auditor should include an emphasis-of-motter paragraph in the auditor's 
report to describe the change and reference the footnote disclosure applicable to the change. The 
auditor should state that the auditor's opinion is not modified regarding the matter. 

1. Include the emphasis-of-matter paragraph in subsequent periods until the new principle is 
applied in all periods presented. 

2. If the change is accounted for by retrospective application to the financial statements, the 
emphasis-of-matter paragraph is only needed in the period of the change. 

F. When Those Four Criteria Have not all been Met (and the Change has a Material Effect on the 
Financial Statements)—The auditor should evaluate whether the change results in a material 
misstatement and consider whether the auditor's report should be modified. 

G. When a Change in the Reporting Entity Results in Financial Statements that are Essentially 
Those of a Different Reporting Entity— The auditor should include an emphasis-of-matter 
paragraph in the auditor's report describing the change in the entity and referencing the entity's 
disclosure. However, that is unnecessary when the change in entity results from a transaction or 
event, such as the purchase or disposition of a subsidiary. 
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Consistency of Financial Statements 


H. Correction of a Material Misstatement in Previousiy Issued Financial Statements 

1. When the financial statements are restated to correct a prior material misstatement— 
The auditor should Include an emphasis-of-matter paragraph in the auditor's report. (That 
paragraph need not be included in subsequent periods.)The auditor should state that the 
auditor's opinion is not modified regarding the matter. 

2 . if the financial statement disclosures r^ating to the restatement are not adequate—The 
auditor should evaluate the Inadequacy of disclosure and consider whether the auditor's 
report should be modified. 

3. A change from an accounting principle that is not in accordance with the applicable financial 
reporting framework to one that Is In accordance is a correction of a misstatement. 

Ilf. Effect on the Auditor's Report 

A. The auditor need not refer to consistency, unless there is an inconsistency due to a material 

change in accounting principle or restatement. 

B. Sample emphasis-of-matter paragraph for a voluntary change in principle: 



Err^phasis-of-Matter; 

As discussed in Mote X;to thefinand^fiat^M 

accounting for {describe accountirig 

the accounting method change). Our o^loi^p 


IS elected to change its method of 
brfs) offinanaal statements that reflect 
!h respect to this matter 


C. Sample emphasis-of-matter paragraph for a restatement: 
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PCAOB on 
Statement 



After studying this lesson,you should bc> able to: 


1. Understand 1 1 » auditor's responsibiliti 3 S under PCAOB Auditing "consistency" 

issues Involv ri j eiihera change inacc )unting principl<‘ or a restatement toConrert previously , 
issued financ I ii statements 

I. Evaluating Consistency of Financial Statements 

ii. Purpose of These PCAOB Auditing Standards 

To establish requirements and provide direction for the auditor's evaluation of the consistency of 
financial statements and the effect of that evaluation on the auditor's report. 

A. Identifies two types of issues related to consistency that might affect the auditor's report: (1) a 
change in accounting principjerand ( 2 ) an adjustment to correct a misstatement in previously 
issued financial statements (i.e., resfofemenfs). 

B. When Reporting on Two or More Periods—The auditor should evaluate the consistency 
between those periods and with the prior period, if that prior period is presented along with the 
financial statements reported on. 

ill. Changes in Accounting Principle 

Involving a change from one generally accepted accounting principle to another, including the 
situation where the accounting principle formerly used is no longer generally accepted. 

A. GAAP is specified by FASB guidance entitled "Accounting Changes and Error Correcthnsi'Jhe 
PCAOB auditing standards point out that, when a company uses retrospective application to 
account for a change in accounting principle, the financial statements generally will be viewed as 
consistent. (However, the previous years'financial statements will appear different from those that 
the auditor previously reported on.) 

B. When There is a Change in Accounting Principle—The auditor should evaluate whether (1) the 
newly adopted principle is GAAP; (2) the method of accounting for the effect of the change 
conforms to GAAP; (3) the disclosures related to the change are adequate; and (4) the 
company has justified that the alternative accounting principle is preferable, 

1. When the four criteria have been met—The auditor should add an explanatory paragraph 
to the auditor's report to identify the inconsistency. 

2. When the four criteria have not been met—The auditor should treat the matter as a GAAP 
departure and modify the audit report appropriately. 

3. When an investor uses the "equity method" and the investee has a change in accounting 
principle that is material to the investor's financial statements—The auditor should add 
an explanatory paragraph to emphasize the matter. 

C. When There is a Change in Accounting Estimate Effected by a Change in Accounting 
Principle—The auditor should evaluate and report on the matter like other changes in accounting 
principle. 

D. When There is a Change in the Reporting Entity Resulting from a Transaction or Event, Such 
as the Purchase or Disposition of a Subsidiary—It does not require recognition in the auditor's 
report. (However, if there is a change in the reporting entity that does not result from such a 
transaction or event, then an explanatory paragraph would be required.) 

IV. Correction of a Material Misstatement in Previously Issued Financial Statements 

A. The correction of a material misstatement in previously issued financial statements should be 
recognized in the auditor's report by the addition of an explanatory paragraph. 



282 


PCAOB on Evaluating Consistency of Financial Statements 


B. Restatements of previously issued financial statements require related disclosures to be made— 
The auditor should evaluate the adequacy of the company's disclosures. 

V. Change in Classification 

A. Changes in classification in previously Issued financial statements normally do not require 
recognition in the auditor's report (unless the change represents a change in accounting principle 
or the correction of a material misstatement). 

B. Accordingly, the auditor should evaluate a material change In financial statement classification 
(and the related disclosure) to determine vyhether such a change is also a change in accounting 
principle or a correction of a material misstatement. 


The auditing requirements under PCAOB Auditing standards are substantially the same as those of 
the AlCPA's Clarified Ai|diting Standards (lpecifically,AU 708, "Consistency of Financial Statements." 
The now-superseded Ho. 1 (specifica|y, AU 420, Consistency of Application of[GAAPj[) previously : 
stated that "error corre|tlon npt involvlnglprinciple" (e.g., mathematical mistakes, oversight, or misuse 
of facts) did not have t| be id wtified in tRe^audltor's report. However, the guidance In the Clarified : 
Auditing Standard nov| treats'restatemen|s as an inconsistency that warrants mention in the auditor's 
report, similar to PCAC$ requirements" 
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Opening Balances—Initial Audits 

After studying this lesson, you should be aWe to:: 

S^5iBibetheauditor'Sresponsibili^for;veii|^ngbpen?ngbo/onces (and consistency) in 
fe.';;audit€ngagement,, 

: 2i; auditor cannot refer to.^he pr^i^essor as providing a partial basis for the auditor's ^. 

3. Know ho\w the inability to verify beginning Inventory would impact the auditor's report when the 
effect Is materia! and pervasive. , : - 


I. Relevant AlCPA Guidance—^The relevant AlCPA guidance is provided by AU 510, Opening 

Balances—Initial Audit Engagements, Including Reaudit Engagements.lhe standard states that the 
auditor's objective is to obtain sufficient audit evidence about whether (a) opening balances contain 
misstatements that materially affect the current period's financial statements; and (b) appropriate 
accounting policies reflected in-the opening balances have been consistently applied in the current 
period (or changes are appropriately accounted for and adequately presented and disclosed). 

IL Selected Definitions 


Definitions 

Initial Audit Engagement: An engagement in which (a) the financial statements for the prior period . 
were not audited; or (b) the financial statements for the prior period were audited by a predecessor 
auditor. 

Opening Balances: Those account balances that exist at the beginning of the period, (also include ,, 
matters requiring disclosure that existed at the beginning of the period, such as contingencies and , 
commitments). , c , 

Predecessor Auditor.Jhe auditor from a different audit firm who has reported on the most recent 
audited financial statements (or was engaged to perform, but did not complete, an audit of the . 

financial rtatements). 

Redudit: Ah initiafaUdit engagement to audit financial statements that have been previously audited 
by a .predecessor auditor. ..z' 


III. Audit Procedures 

A. The auditor should read the most recent financial statements and any predecessor's audit report 
for information relevant to opening balances. '' 

B. The auditor should request management to authorize the predecessor to respond fully to inquiries 
by the auditor and to allow the auditor to review the predecessor auditor's audit documentation. 

1. The predecessor may request a consent and acknowledgment letter from the entity to 
document the authorization regarding the communication with the auditor. Such a letter is 
not required, but the SAS provides an example. 

2. The predecessor may also request a successor auditor acknowledgment letter to document 
the auditor’s agreement regarding the use of the predecessor auditor's audit documentation 
before permitting access to it. Such a letter is not required, but the SAS provides an example. 

3. The extent to which the predecessor permits access to the audit documentation is a matter of 
professional judgment. 

4. The auditor's use of the predecessor's information Is influenced by the auditor's assessment of 
the predecessor's competence and independence. 
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Opening Balances—Initial Audits 


C. Evaluate the Entity's Opening Balances 

1. Obtain sufficient appropriate auditevidenceasto whether opening balances contain 
misstatements affecting the current period financial statements by (a) determining whether 
the prior closing balances have been properly brought forward; (b) determining whether 
the opening balances reflect the application of appropriate accounting policies; and (c) 
evaluating whether current period audit procedures provide evidence relevant to the 
opening balances (such as reviewing the predecessor's audit documentation). 

2. If the opening balances contain material misstatements affecting the current period, 
the auditor should determine the effect on the current period's financial statements and 
communicate the misstatements to the appropriate level of management and those charged 
with governance. 

D. Evaluate the Consistency of Accounting Policies —^The auditor should obtain sufficient 
appropriate audit evidence as to whether the accounting policies reflected in the opening 
balances have been consistently.applied In the current period (and whether any changes have 
been properly reported). 

E. Discovery of possible material misstatements in financial statements reported on by a predecessor 
auditor. 

1. The auditor should request management to inform the predecessor of the situation and 
arrange a three-way meeting to resolve the matter. 

2. If management does not cooperate (or If the auditor is not satisfied with the resolution of the 
matter), the auditor should evaluate the Implications to the current engagement and whether 
to withdraw. The auditor may also wish to consult with legal counsel for guidance. 

iV. Audit Reporting Considerations 

A, Reference to Predecessor— The auditor should not refer to the predecessor's work or report as a 
partial basis for the auditor's opinion. 

6. Opening Balances 

1. If unable to obtain sufficient appropriate audit evidence regarding the opening balances, the 
auditor should either express a qualified opinion or disclaim an opinion, as appropriate. 

2. If there is a material misstatement In the opening balances, the auditor should either express 
a qualified or adverse opinion, as appropriate. 

C. Consistency of Accounting Policies— The auditor shpuid either express a qualified or adverse 
opinion (as appropriate) if the current period's accounting policies are not consistently applied in 
relation to the opening balances (or If any material changes are not properly reported). 

V. Sample Report —A sample report follows with a disclaimer of opinion on results of operations and 

cash flows and an unmodified opinion on financial position!Rowing to the inability to verify opening 

inventory such that the effect is deemed to be material and pervasive). 

A. Modify introductory sentence—".. and were engaged to audit.. 

B. Do not change to Management's Responsibility section. 

C. Modify Auditor's Responsibility section—Modify the first two paragraphs and comment on the 
"basis for unmodified opinion on financial position"at the end. 

D. Add a "Basis for Disclaimer" paragraph on results of operations and cash flows. 

E. Disclaim an opinion on results of operations and cash flows. 

F. Provide an opinion only on financial position. 

G. Sample report with a disclaimer of opinion on results of operations and cash flows and an 
unmodified opinion on financial position (owing to the inability to verify opening inventory) 
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Forming Conclusions and Reporting 


Independent Auditor's Report 

(Appropriate Addressee) , > ;, ^ 

We have audited the accompanying balance sheet of ABC Company, as of December 31,20X1, and 
were engaged to audit the related statements of Income, changes in stockholders' equity and cash 
flows for the year then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of internal control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on conducting the 
audit In accordance with auditing standards generally accepted in the United States of America, 

Because of the matters described in the Basis for Disclaimer of Opinion paragraph, however, we were , 
not able to obtain sufficient appropriate audit evidence to provide a basis for an audit opinion on the 
income statement and the cash flow statement 

We conducted our audit of the balance sheet in accordance with auditing standards generally 
accepted in the United States of America. Those standards require that we plan and perform the audit 
to obtain reasonable assurance about whether the balance sheet is free of material misstatement 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements.The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's interna! control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accountlng^stlmates made by management, as 
well as evaluating the overall presentation of the financial statements. 

We believe that the audit evidence we have obtained i^-sUfflcient and appropriate to provide a basis 
for our unmodified opinion on the financial position. 

Basts for Disclaimer of Opinion on the Results of Operations and Cash Flows 

We were not appointed as auditors of the company until'aftei: December 31,20X0, and thus did not 
observe the counting of the physical inventories atfhe beginning of the year. We were unable tp 
satisfy ourselves by alternative means concerning inventory quantities held at December 31,20X0. 

Since opening inventories enter into the determination of the net income and cash flows, we were 
unable to determine whether adjustments might have been necessary relating to the profit for the 
year reported in the income statement and the net cash flows from operating activities reported In the 
cash flow statement 

Disclaimer of Opinion on the Results of Operations and Cash Flows 

Because of the significance of the matter described in the Basis for Disclaimer of Opinion paragraph, 
we have not been able to obtain sufficient appropriate audit evidence to provide a basis for an audit 
opinion on the income statement and the cash flow statement Accordingly, we do not express an 
opinion on the results of operations and cash flows for the year ended December 31,20X1. 
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opening Balances—Initial Audits 


Opinion on th« Financial Position 

In our opinion, the balance sheet presents fairly, in all material respects, the financial position of ABC 
Company, as of December 31,20X1, In accordance with accounting principles generally accepted in 
the United States of America. 

(Auditor's signature) 

(Auditor's city and state) ■/. V , 

(Date of the auditor's reppi^‘ 
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other Information ASong with Financial Statements 


After btudying this lesson, you should be able to: 

1, I';- f'ify ih'. auditor's losponsihitily iorolhot infotnwtion inciuded In a document containing the 
audited hnancial statements. 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 720, Other Information 
in Documents Containing Audited Financial Statements.The standard states that the auditor's objective 
is to respond appropriately when the auditor becomes aware that documents containing audited 
financial statements and the auditor's report include other information that could undermine the 
credibility of those financial statements and the auditor's report 


Definitions . " 

Other informatiominformation other than the financial statements and tbe auditor^s report that is ; 
included in a document contalning-atidlted financial statements and the auditor's report (can.be^^ : . s 
financial and nonfinancia! \r\forrr)at\on,but excludes required supplementary information). 

Inconsistency: Other information that conflicts with information contained inthe audited financial . 
statements (may raise doubt about the auditor's conclusions and the basis for the auditor's opinion),;. 

Misstatement of Fact: Other information that Is unrelated to matters appearing imtbe audited financla! 
statements that is incorrectly presented (may undermine the credibility of the docurneht containing ; 
•Ihdauditedfihanciai statements). 


M. Auditor Responsibilities 

A. When the audited financial statements and auditor's report is included in a document containing 
other information, the auditor should read the other information to identify any material 
inconsistencies with the financial statements. 

1. Examples of other Information— Financial summaries or highlights, management reports 
on operations, employment data, financial ratios, selected quarterly data, employment data, 
names of officers/directors, etc. 

2. Other information does not include press releases, cover letters accompanying documents 
containing the audited financial statements. Information in analyst briefings, or information 
posted to the entity's Web site. 

B. Material Inconsistencies Identified Prior to the Report Release Date 

1. Request that management make appropriate.reVision. 

2. If management refuses— Inform those charged with governance and (a) include an ofher- 
matter paragraph to the auditor's report/(b) withhold the auditor's report, or (c) withdraw 
from the engagement (when permitted). 

C. Material Inconsistencies Identified After the Report Release Date 

1 . If management agrees to make the revision— The auditor may review steps taken by 
management to ensure that users of the financial statements and other information are 
informed of the need for revision. 

2. If management refuses—Inform those charged with governance and take appropriate 
action {such as seeking advice from the auditor's legal counsel). 

D. Material Misstatements of Fact—The auditor should discuss the matter with management and, 
if there is a material misstatement offact, the auditor should request management to consult 
with a qualified third party (such as the entity's legal counsel). If management refuses to correct a 
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Other Information Along with Financial Statements 


material misstatement of fact, the auditor should communicate the matter to those charged with 
governance. 

. Reporting issues—Disciaiming an Opinion on the Other Information 



Note 

The auditor is not required to refei 
of opinion on it to avoid any conft 


:her information in the auditor’s report, but may choose to inciudea disclaimer 


Sic financial statements 
additional analysis and is 
not been subjected to the 
and accordingly, we do not 


ling an opinion on 


^resented foripurpi 
nts. Such infdrnriati 
iasic financiaistatei 


iny assurance on it» 
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Supplementary Information 
Financial Statements 


Miter studyinij this lesson, you should be able to: 

1. identify the auditor's responsibilities when engaged to report on \upphmentary inlontuu an j 

relation to the puditedfinanaahtatements j 

2. Prepare; i appropriate other matter paragiaph when expressing an opinion on the suppiem^niai > 
information in relation to the audited financial statements in a combined report on the audited 
finandalsiatements. 

I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 725, Supplemer)tary 
Information in Relation to the Financial Sfofements as a Whole. The standard states that the auditor's 
objective is to evaluate the presentation of the supplementary information and report on whether it is 
fairly stated, in all material respects, Jn relation to the financial statements as a whole, 

II. Fairly Stated— When engaged to determine whether supplementary information is fairly stated in 

relation to the financial statements. 

A. The auditor should determine whether: 

1. The supplementary information was derived from (or directly related to) the underlying 
records used to prepare the financial statements. 

2. The supplementary information relates to the same period as the financial statements. 

3. The auditor served as the auditor of the financial statements. 

4. Either an unmodified or qualified opinion was expressed on the financial statements (must 
not have issued an adverse opinion or disclaimer of opinion). 

5. The supplementary information will either accompany the entity's audited financial 
statements or the audited financial statements will be made readily available by the entity. 

(Note: Readily available means without further action by the entity. Being available upon the 
user's request is not considered readily available). 

B. The auditor should obtain management's agreement that management has responsibility for: 

1. Preparing the supplementary Information in accordance with applicable criteria 

2. Providing the auditor with written representations 

3. Including the auditor's report on the supplementary Information in any document containing 
the supplementary information that references the auditor's association with it 

4. Presenting the supplementary information with the audited financial statements (or making 

the audited financial statements readiiy available to the intended users of the supplementary ^ 

information) | 

C. The auditor should perform the following procedures: 

1. Inquire of management about the purpose of the supplementary information and the criteria I 
used to prepare it. 

2. Obtain an understanding about the methods used and whether those methods have :| 

changed (and if changed, the reasons for any changes). 

3. Compare and reconcile the supplementary information to the financial statements or to the 

underlying records used for the financial statements. ; 

4. Inquire of management about any significant assumptions used. ■ 
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Supplementary Information Related to Financial Statements 


5. Evaluate the appropriateness and completeness of the supplementary information in 
relationship to the audited financial statements. 

6. Obtain appropriate written representations from management. 

lii. Reporting on Supplementary Information in Relation to Audited Financial Statements 

A. Form of Report—The auditor may issue a separate report on the supplementary information 
(in addition to the report on the audited financial statements) or combine the report on the 
supplementary information with the report on the financial statements. (If the latter, then add an 
other-matter paragraph regarding the supplementary information.) 

B. If the auditor expressed an adverse opinion or a disclaimer of opinion on the financial statements, 
the auditor is prohibited from reporting on the supplementary information. 

C. If the supplementary information is materially misstated in relation to the financial statements, 
the auditor should discuss the matter with management and propose appropriate revision. 

If management does not revise the supplementary information, the auditor should either 
appropriately modify the opinion on the supplementary information or withhold the separate 
report on it. 

D. Sample other-matter paragraph when the auditor expresses an unmodified opinion on the 
financial statements and on the supplementary Information in a combined report: 


.:OgF audit was conducted for the p urposj 
y^(hx)\e.ThQ {identify accompanying 
lana^sis and is not a required part ® 
iOf;n?»anagement and was derived ^ 
records used to prepare the flnanci|| 
i^rocedures applied In the audit ofS^ 
iteelUding comparing and reconclfli 
Bother records used to prepare the^^j 
sQther additional procedures in acdjj 
States of America.ln our opinion, thi 
the financial staterhents as a whole. 


i^pinion on the financial statements as a 
rmation) is pt esented for purposes of additiona | 
aments. Such Information Is the responsibility 

ictly to the underlying accounting and other 
linformation has been subjected to the auditing 
lents and certain'additional procedures, 
directiy.to lie underlying accounting and 
|s or to the fin^pal statements themselves, and 
^ng stondci Jb generally accepted in the United ; 
iiirly stated in ail material respects in relation to 
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After studying this lesson, you should be able to: 

1. identify the auditor^respprisibilities when r^uired sappkmentary information is associated with 
audited financiar^tpmenfc. 

2, Prepare, ah ippropdate ernphasisTof-rnatterorotherrmatter paragraph wheneooTOiei^g 
on required supplementary informatior) (orits omission) in connection with audited fnanclal 

" state.ments,''v- 


I. Relevant AlCPA Guidance—The relevant AlCPA guidance is provided by AU 730, Required 

Supplementary Information. The standard states that the auditor's objectives are to (1) describe in the 
auditor's report whether required supplementary information Is presented, and (2) communicate 
when the supplementary information has not been presented In accordance with the established 
guidelines (or when material modification is necessary). 


Definitions 

Required supplementary information: Information that a designated accounting standard setter 
requires to accompany an entity's basic financial statements (the information is not part of the basic 
financial statements, but authoritative guidelines for measurement and presentation haveibeen: 
established). 

Designated accounting standard setter. A body designated by the AlCPA council to establish GAAP ■ ^ 
pursuarit to the Rule of Conduct on Compliance Standards, 


ii. Procedures to Be Performed by the Auditor 

A. Inquire of management about the methods used to prepare the information, including 

(1) whether it is measured and presented in accordance with prescribed guidelines; (2) whether 
the methods of measurement or presentation have been changed relative to prior period; and 
(3) whether any significant assumptions affect the measurement or presentation of it. 

B. Compare the information for consistency with (1) management's responses to the auditor's 
inquiries; (2) the basic financial statements; and (3) other knowledge obtained during the audit of 
the basic financial statements. 

IH. Reporting Implications 

A. The auditor should include an other-matter paragraph In the auditor's report commenting 

appropriately on the required supplementary information.The supplementary information 
cannot affect the auditor's opinion on the financial statements, since it is outside of those financial 
statements. , • ' . 

B. The specific language to be used depends upon the particular circumstances. 

1. Whether the required supplementary Information is included and the auditor has applied the 
procedures described above (no material departures); 

2. Whether the required supplementary information Is omitted; 

3. Whether some required supplementary information Is missing and some is presented in 
accordance with prescribed guidelines; 

4. Whether the auditor has identified any material departures from prescribed guidelines; 

5. Whether the auditor is unable to complete required procedures; or 

6. Whether the auditor has unresolved doubts as to whether the required supplementary 
information is presented in accordance with prescribed guidelines. 
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Example language when the required supplementary information is included and the auditor 
has performed the appiicable procedures without identifying any materiai departures: 

[Identify the applicable financial reporting framework (e.g^ accounting principles generally accepted in 
the United States of America)] require that the {identify the required supplementary information) on page 
XX be presented to supplement the basic financial statements. Such information, although not a part 
of the basic financial statements Is required by {identify designated accounting standard setter) who 
considers it to be an essential part of financial reporting for placing the basic financial statements m an 
appropriate operational, economic, or historical context. We have applied certain limited procedures 
to the required supplementary information In accordance with auditing standards generally accepted 
in the United States of America, which consisted of inquiries of management about the methods 
of preparing the information and comparing the Information for consistency with management's 
responses to our inquiries, the basic financial statements/and ottier knowledge we obtained during 
our audit of the basic financial statements. We do not express an opinion or. provide any assurance on 
the information because the limited procedures doj^tproxnde us with sufficient evidence to express 
anopinionorproyideany-assurance.- 
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PCAOB on Auditing Supplemental information 

After studying this lesson, you should be able to: 

1. Know the meaning of the term "supptemen^l information"' as used by the PCAOB. 

2. Know the auditor's responsibility for performing audit procedures' on suppiementai information 

3. Knowthe auditor's respohSibilitiesfpf reporting on suppiementai infprmattonuhder PCAOB 


I. Auditing Supplemental Information Accompanying Audited Financial Statements 

II. Introduction and Overview 

A. The PCAOB issued this guidance primarily because of recent changes in the regulatory 
environment. For example, the 2010 Dodd-Frank Act gave the PCAOB oversight responsibility 
for audits of brokers and dealers registered with the SEC.These brokers and dealers are required 
to file certain schedules of information with the SEC.The previous PCAOB standards on 
supplemental information {adopted from the AICPA standards in 2003) addressed supplemental 
information only in auditor-submitted documents and did not specify audit procedures to be 
applied to supplemental information that is filed with a regulatory authority, such as the SEC.The 
current PCAOB standards apply to supplemental information, whether it is required by regulatory 
authorities or provided voluntarily, when audited In connection with financial statements audited 
under PCAOB auditing standards. 

B. Objective— The auditor's objective is "to obtain sufficient appropriate audit evidence to express 
an opinion on whether the supplemental information is fairly stated, in all materia! respects, in 
relation to the financial statements as a whole." 


Definition 

Supplementallnformation:“Refers to the following Information when it accompanies audited financial 
statements; , . ; ; 

a, Supporting schedules that brokers and dealers are required to file pursuant to Rule 173-5 under the 
SeciiritjesExchange Actof 1934; 

b Supplemental information (i) required to be presented purstlant to the rules and regulations of a 
regulatory authority and, (li) covered by an independent publiceccountant's report on that information . 
in reiatiPn to financial statements that are audited in accordance with PCAOB standards; or 

c. Information that is (i) aheiliary to the audited financial statements, (ii) derived from the company's 
accounting books and records, and (Hi) covered by an independent public accountant's report on 
that jnformation in relation to thefinanciaf statements tfi^areaudited in accordance with PCAOB 
■ standards''' 


C. Overview of the Performance and Reporting Requirements 

1. The auditor is required to perform audit procedures specifically to test the supplemental 
information. 

2. The auditor is required to evaluate (a) whether the supplemental information is fairly 
presented in relation to the audited financial statements; and (b) whether the suppiementai 
information complies with the relevant regulatory requirements (or other criteria, if 
applicable). 

3. The auditor is required to coordinate audit work on the supplemental information with audit 
work on the related financial statements. 
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4. The auditor is required to clearly report the auditor's responsibilities and conclusions when 
reporting on supplemental information. 

ill. Performing Audit Procedures on the Supplemental Information 

A. The nature, timing, and extent of the procedures to be applied to the supplemental Information 
may vary with the circumstances, including the following: (1) the risk of material misstatement; 

{2} the applicable materiality levels relevant to the information; (3) the audit evidence obtained 
with respect to the financial statements; and (4) the type of opinion expressed on the financial 
statements. 

B. In performing procedures on the supplemental information, the auditor should: 

1. Obtain an understanding of the purpose of the information and the criteria used by 
management for its presentation; 

2. Obtain an understanding of the methods used to prepare the information, evaluate the 
appropriateness of those methods, and determine whether those methods are consistent 
with those used in the prior period; 

3. Inquire of management about any significant assumptions underlying the presentation of the 
information; 

4. Determine that the information reconciles to the financial statements or other applicable 
records; 

5. Perform procedures to test the completeness and accuracy of the information (if not already 
tested in connection with the audit of the financial statements); 

6. Evaluate whether the information complies with relevant regulatory requirements (or other 
applicable criteria); and 

7. Obtain appropriate management representations: (a) that management acknowledges 
responsibility for the fair presentation of the information; (b) that management believes the 
information is fairly stated; (c) that the methods used have not changed from the prior period 
(if changed, state that the reasons for the changes are appropriate); (d) that the information 
complies with regulatory requirements or other applicable criteria; and (e) that management 
believes any underlying assumptions are appropriate. 

IV. Evaluation of Audit Results 

A. Overall Evaluation— The auditor should evaluate whether the information is fairly stated in 
relation to the financial statements, including whether the information is presented in conformity 
with regulatory requirements or other applicable criteria., 

B. Accumulated Misstatements— The auditor should communicate accumulated misstatements to 
management to give management a chance to make corrections. 

C. Uncorrected Misstatements— The auditor should evaluate whether uncorrected misstatements 
are material (based on relevant quantitative and qualitative factors). 

V. Reporting on Supplemental Information 

A. Combined or Separate Reports Permitted— Unless prohibited by regulatory requirements, 
the auditor may either issue a separate report on the supplemental information and the financial 
statements or issue a combined report on both. 

B. Effects of Modifications to the Report on Financial Statements— The auditor should evaluate 
whether any modification of the report on the financial statements Is relevant to the opinion to be 
expressed on the supplemental information. 

1. Qualified opinion on the financial statements— The auditor should express a qualified 
opinion on the supplemental information If the basis for the qualification also applies to the 
supplemental information. 

2. Adverse opinion (or disclaimer) on the financial statements—The auditor should likewise 
express an adverse opinion (or disclaimer) on the supplemental information. 
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PCAOB's Sample (Separate) Report on Supplemental Information: 

Tfie (Identify supplementarinformitipn) has to audit proeed|res 

edn|unctjon With the aydi 0t(Cor|f^nyi5) finahy^^t^rients.:^e (supplei^ental information) is the 

responsibility of the Company's m|nagemeni Our audit procedures includecjdetermining^ Whether 

theXspp|6rnehtalinfprrriatidn}rb|onc|lestd:theSnaaciai:^i^mentsp 

and other records, as applicable, apd performing procedums to test the com|leteness and accuracy 
of the infprmatidh presented in thl (supplemental Ihfonhadonjjhformih^^ 

(Supplemental information), we exialuated whether (supplemental infdrn|atigh)Hncludirtg itsifor^ 
arx^cdhtent, is presented in confQ|mitywlth(specify thet^evaht r^ujatory |equirement pr pthef ; ' 
critWiaXifany).1nqurppinion,the|den%^^ ihforniatipn) is fajrll stated, in alim 

respects, in^relation to the finanei^ statements as a whole.,'^;^ 








After studying this lesson, you should be able 1o: 


1. Identify the circumstances for which the auditor should include an alert to restrict the use of the 
auditor's written communication. 

2. Identify the appropriate wording associated with an alert to restrict the use of the auditor's written 
communication. 

I. Relevant AlCPA Guidance—The relevant AlCPA guidance is provided by AD 905, Alert That Restricts 
the Use of the Auditor's Written Communication.The standard states that the auditor's objective is to 
restrict the use of the auditor's written communication by including an alert when the potential exists 
for that communication to be misunderstood if taken out of the context of its intended use. 

II. Using an Alert to Restrict the Use of the Auditor's Report 

A. Such an alert should be included as a separate paragraph of the report when: 

1. The subject matter is based on criteria that are only suitable for (or available to) a limited 
number of users; or 

2. The matters are presented in a by-product report that is not the primary objective of the 
engagement. 

3. Including an Alert— The auditor is not prohibited from including such an alert in any other 
auditor's report or written communication. 

4. Purpose of the Alert—The purpose of the alert is to restrict the use of the auditor's written 
communication because of the potential for misunderstanding if taken out of the context for 
which the written communication is intended. 

5. Content of the Alert— The auditor should state that the written communication is intended 
solely for the use of the specified parties (and either identify or refer to those parties). 

6. Adding Other Specified Parties— The auditor should obtain acknowledgment in writing 
from such other parties as to their understanding of the nature of the engagement, the 
criteria used, and the auditor's written communication. They can be added after the release of 
the auditor's written communication (by amending theyvritten communication to add them, 
but without changing the original date of the auditor's written communication). 

7. Distribution of the Auditor's Written Communication— The auditor is not responsible 
for enforcing the distribution of the auditor's written communication after its release. The 
purpose of the alert is to appropriately communicate such restricted distribution. 

III. Sample Reporting Language for an Alert to Restrict the Use of the Auditor's Report 


A. Atypical alert consists of one sentence at the end of the auditor's report: 





Forming Conclusions and Rep>orting 


B. Alert for engagements performed In accordance with Government Auditing Standards: 


The purpose of this {report, letter, pKsentatioo, or communication) Is solely to {describe the purpose 
of the auditor's written communkQtidn,such as to desaibe the scope of our testing of internal control 
over financial reporting and compliance, and the results pfthat testing, and notto provide an opinion on 
the effectiveness of the entity's internal cohtrdioveriinancialfepdrting or on comp//ance).This {report, 
letter, presentation, or communication) is an integral;part pNn audit performed In accordance with 
Government Auditing Standardiln consid^ing {describe the results that are being assessed, such as 
the entity's internal control overhharioa} reporting and compliance). Accordmgiy, this {report, letter, 
presentation, or communication) is not suitable for ary other purpose. 


298 




Financial Statements Using Another 
Country's Framework _ 


After studying this lesson, you should be able 


Identify the auditor's 
accordance with a financial 



prepared W 

2. Identify the reporting languale iHt would on 

financial..' 




accepted 


statements prepare||i ac -uhi • t.ith a financial rnporii iq framework gere 


I. Relevant AiCPA Guidance—The relevant AlCPA guidance Is provided by AU 910, Financial Sfnfemenfs 
Prepared in Accordance With a Financial Reporting Framework Generally Accepted in Another Country. 

The standard states that the auditor's objective, when engaged to report on financial statements 
prepared in accordance with a financial reporting framework generally accepted in another country, 
is to address appropriately the special considerations that are relevant to: (1) the acceptance of the 
engagement; (2) the planning and performance of the engagement; and (3) the formation of an 
opinion and reporting on the financial statements. 

II. Acceptance of the Engagement 

A. Considerations— The auditor should obtain an understanding of (1 ) the purpose for which the 
financial statements are prepared; (2) the intended users of the financial statements; and (3) steps 
taken by management to determine that the framework is acceptable in the circumstances. 

B. Users— The auditor should consider whether the intended users are likely to be familiar with the 
applicable financial reporting framework. 

III. Performance of the Engagement 

A. Use Solely Outside the U.S.— When auditing financial statements intended for use solely outside 
the U.S., the auditor should comply with GAAS, except for requirements related to the form 

and content of the auditor's report. The auditor should obtain an understanding of the entity's 
selection and application of accounting policies. 

B. Consultation with Others—The auditor may wish to consult with others having expertise in 

applying that country's reporting framework. ^ 

IV. Reporting 

A. For Use Only Outside the U.S.— The auditor should report either using (1 ) a U.S. form of report 

(including a statement that refers to the note to the financial statements that describes the basis 
of presentation, including the country involved); or (2),ihe report form and content of the other 
country (identify the other country in the report), - ' „ 

B. For Use Both Outside and Inside the U.S. —If the financial statements are also intended for 
use in the U.S., the auditor should report using the U.S. form of report, including an emphasis-of- 
matter paragraph that (1) Identifies the financial reporting framework used; (2) refers to the note 
to the financial statements describing that framework; and (3) Indicates that such a framework 
differs from U.S. GAAP. 

C. Summary of the Differences in the Audit Reporting Language Relative to U.S. Form. 

1. Thefirst sentence would be changed as follows:... financial statements, which, as described 
in note X to the financial statements, have been prepared on the basis of {specify the financial 
reporting framework generally accepted) in {name of the country)!' 

2. The sentence describing management's responsibilities would be changed as follows: 
"Management is responsible for the preparation and fair presentation of these financial 
statements in accordance with {specify the financial reporting framework generaliy accepted) in 
{name of country);" 
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3. The second sentence in the section on the auditor's responsibility would be changed as 
follows: "We conducted our audit in accordance with auditing standards generally accepted in 
the United States of America (and [in name of country])" 

4. The opinion would be changed as follows: "In our opinion, the financial statements referred 
to above present fairly. In all material respects,... In accordance with {specify the financial 
reporting framework generally accepted) In {name of country)'.' 

V. Sample Report—U.S. form of Independent Auditor's Report to report on financial statements 
prepared In accordance with a financial reporting framework generally accepted In another 
country that are intended for use only outside the United States: 


independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of Income, changes in 
stockholders' equity, and cash flows/or the year then ended, and the related notes to the financial 
statements, which, as described in note X to the financial statements, have been prepared on the basis 
of (specify the financial reporting framework generally accepted) it) {name of country). 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements In 
accordance with (specify the financial reporting framework generally accepted) in (name of country); this 
includes the design, implementation, and maintenance of internal control relevant to the preparation , 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States 
of America (and [in name of country]). Those standards require that we plan and perform the audit 
to obtain reasonable assurance about whether the financial statements are free from material 
misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosutes 
in the financial statements. The procedures selected depend the auditor's judgment, including the 
assessment of the risks of material misstatement of the financial statements, whether due to fraud or 
error. In making those risk assessments, the auditorcon'side/s internal control relevant to the entity's 
preparation and fair presentation of the financiat statements In order to design audit procedures 
that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control. Accordingly, we express no such opinion. An audit also 
includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management,.as well as evaluating the overall presentation ^ 
pf the financial statements. '' ■.-■''y" ' : / 

We believe that the audit evidence we have obtained Is sufficient and appropriate to provide a basis:: 
for gur audit opinion. 

Opinion 

In our opinion, the financial statements referred to above present fairly, in all materia! respects, the 
financial position of ABC Company as of December 31,20X1, and the results of its operations and 
its cash flows for the year then ended in accordance with {specify the financial reporting framework 
generally accepted) m {name of country). 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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After studying this lesson, you should be able to: 

1; Identify the auditor's responsibilities when enga^ to report oh an 
'sfafemenfsv . '7 

2. identify the reporting language that would be appropriate when issuing an audit report on 
summary financial statements. / : ; 


I. Relevant AlCPA Guidance—^The relevant AlCPA guidance is provided by AU 810, Engagements to 
Report on Summary Financial Statements.lhe standard states that the auditor's objectives are (1) to 
determine whether it is appropriate to accept the engagement to report on summary financial states; 
and (2) if engaged, to perform the necessary procedures, to form an opinion on whether the summary 
financial statements are consistent with the audited financial statements from which they have been 
derived, and to clearly express that opinion (and the basis for it) through a written report. 


Definitions 

AppliedCriterlgilhe criteria applied by management in the preparation of the.summary financial 
statements. ' 

Summoryf/nanc/o/Sfutemenfs: Historical financial information that is derived from financial 
statements but that contains less detail than the financial statements, while still providing a structured 
, representation consistent with that provided by the financial statements. 


W, Engagement Acceptance 

A. The auditor must have been engaged to audit the financial statements as a whole in order to 
accept an engagement to report on summary financial statements. 

B. Before accepting an engagement to report on summary financial statements—The auditor should 
(1) determine whether the applied criteria are acceptable; and (2) obtain a written agreement 
from management acknowledging their responsibilities and accepting the expected form and 
content of the auditor's report. 

III. Procedures to Be Performed by the Auditor 

A. Evaluate whether the summary financial statements adequately disclose their summarized nature 
and identify the audited financial statements. 

B. When unaccompanied by the audited financial statements, evaluate whether the audited financial 
statements are readily available to users. 

C. Evaluate whether the summary financial statements adequately disclose the applied criteria. 

D. Compare the summary financial statements with the related audited 
financial statements. 

E. Evaluate whether the summary financial statements are prepared in 
accordance with the applied criteria. 

F. Evaluate whether the summary financial statements contain necessary 
information at an appropriate level of aggregation so they are not 
misleading. 

G. Obtain a written representations letter that addresses the following 
matters: 

1. Management has prepared the summary financial statements in accordance with the applied 
criteria (and that the applied criteria are acceptable). 


Note 

Audited finandal 
statements are viewed os ■ 
readily available if users 
can obtain them vifithout 
any further action by the 
entity Management's 
statement that they are 
available upon request, 
would not be considered 
readily available. 
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2. Management has made the audited financial statements readily available to the intended 
users. 

3. If the date of the report on the summary financial information is later than the date of the 
report on the audited financial statements, include a statement as to whether management 
believes any of its previous representations need to be modified and whether any subsequent 
events require adjustment to or disclosure in the audited financial statements. 

4. The representation letter should be dated the same as the auditor's report. 

IV. Form of the Auditor's Opinion 

A. Only an Unmodified or Adverse Opinion is Permitted-— The summary financial statements are 
either consistent or not consistent with the audited financial statements; accordingly, a qualified 
opinion is not permitted. 

1 . Unmodified opinion —When issuing an unmodified opinion on the summary financial 
statements, the opinion should state that they are consistent, in all material respects, with 
the audited financial statements from which they have been derived, in accordance with the 
applied criteria. 

2. Adverse opinion —When issuing an adverse opinion on the summary financial statements, 
the opinion should state that the financial statements are not consistent. In all material 
respects, with the audited financial statements in accordance with the applied criteria. 

B. Adverse Opinion or Disclaimer of Opinion— When the auditor's report on the audited financial 
statements contains an adverse opinion or a disclaimer of opinion, the auditor should either 
withdraw from the engagement to report on the summary financial statements (when withdrawal 
is possible) or disclaim an opinion on the summary financial statements. 

V. Auditor's Report on Summary Financial Statements—Include the following elements: 

A. A title that includes the word independent 

B. Addressee 

C. Introductory paragraph that (1) identifies the summary financials; (2) identifies the audited 
financial statements from which the summary financials were derived; (3) refers to the auditor's 
report on the financial statements and the date; and (4) states that the summary financials do not 
include all the disclosures required for complete financial statements 

D. Description of management's responsibility 

E. Statement about the auditor's responsibility 

F. A paragraph that clearly describes an opinion 

G. The auditor's signature, city and state, and date of the report 

VI. Sample Audit Report on Summary Financial Statements 
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Independent Auditor's Report on Summary Financial Statements 

(Appropriate Addressee) ' ■ 

The accompanying summary financial statements, which comprise the summary balance sheet as of 
December 31,20X1, the summary income statemenit, summary statement of changes in stockholders' 
equity and summary cash flow statement for the year then ended, and the related notes, are derived 
from the audited financial statements of ABC Company as ofand for the year ended December 31, 
20X1. We expressed an unmodified audit opinion on those audited financial statements in our report 
dated February 15,20X2. The audited financial statements, and the summary financial statements 
derived therefrom, do not reflect the effects of events, if any, that occurred subsequent to the date of 
our report on the audited financial statements. 

The summary financial statements do not contain ail the disclosures required by (describe financial, 
reporting framework applied in the preparation of the financial statements of ABC Company). Reading 
the summary financial statements, therefore, is not a substitute for reading the audited financial 
statements of ABC Company. 

Management's Responsibility forthe Summary Financial Statements 

Management is responsible for the preparation of the summary financial statements on the basis 
described in Note X. 

Auditor's Responsibility 

Our responsibility is to express an opinion about whether the summary financial statements are 
consistent, in all material respects, with the audited financial statements based on our procedures, 
which were conducted in accordance with auditing standards generally accepted in the United States 
of America. The procedures consisted principally of comparing the summary financial statements 
with the related Information in the audited financial statements from which the summary financial 
statements have been derived, and evaluating whether the summary financial statements are 
prepared in accordance with the basis described in Note X. We did not perform any audit procedures 
regarding the audited financial statements after the date of our report on those financial statements. 

Opinion 

In our opinion, the summary financial statements of ABC Company as of and for the year ended 
December 31,20X1 referred to above are consistent, in all material respects, with the audited financial 
statements from which they have been derived, on the basis described in Note X. 

(Auditor's signature) 

(Auditor's city and state) ' 

(Date of the auditor's report) 
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Identify the audi 
information. 

Identify the repo 
entity's interim fi 



^gaged to report oi&^ntity's interim Unandai 

appropriate wh^ag^^^^ew report on an audit 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 930: Interim Financial 

Information. The standard states that the auditor's objective is to obtain a basis for reporting whether 
the auditor is aware of any material modifications that should be made to the interim financial 
information for it to be in accordance with the applicable financial reporting framework through 
performing limited procedures. 


interim Finariciai Information: Financial in accordance with 

an applicable fihanciaj4portinaframev ^^^^^^ftr^ ^^^^ complete pi condensed set of 
financial statements S5erlng a period(s^^^an^ fffl^^^covering a. 1 2-month period ending 
bn a date other than the entity's fiscal year end. ^ 


it. Engagement Acceptance 

A. Before accepting an engagement to review the interim financial information, the auditor should 
(1) determine whether the financial reporting framework to be applied is acceptable; and (2) 
obtain the agreement of management regarding the engagement terms. 

B. Agreement on Engagement Terms —The auditor should agree upon the terms of the 
engagement with management (or those charged with governance) and record those terms 
in an engagement letter that includes: (1) the objectives and scope of the engagement; (2) the 
responsibilities of management; (3) the responsibilities of the auditor; (4) the limitations of a 
review engagement; and (5) identification of the applicable financial reporting framework. 

HI. Engagement Performance 

A. Obtain an understanding oftheentityand its environment, including internal control related to 
the preparation of annua! and interim financial information. This should be sufficient to (1) identify 
the types of potential misstatements (and likelihood of occurrence) and (2) select the inquiries and 
analytical procedures for the auditor's basis for conclusions. 

B. Analytical Procedures, Inquiries, and Other Review Procedures 

1. Analytical procedures— The auditor should'apply analytical procedures to the interim 
information to identify unusual items that may indicate a material misstatement, including 
the following: 

a. Comparing the interim financial information with comparable information for the 
immediately preceding period and with the corresponding period(s) in the previous year; 

b. Comparing recorded amounts or ratios developed from recorded amounts to 
expectations; and 

c. Comparing disaggregated revenue data. 

2. inquiries and other review procedures— TTig auditor should make the following inquiries 
and perform the following other procedures In a review of Interim financial information. 

a. Read the available minutes of meetings of stockholders, directors, and appropriate 
committees; 
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b. Obtain reports from any component auditors related to reviews of significant 
components or inquire of those auditors if reports have not been issued; 

c. Inquire of management about the matters normally associated with a management 
representations letter; 

d. Obtain evidence that the interim financial information agrees to (or reconciles with) the 
accounting records; 

e. Read the interim financial information; and 

f. Read other information in documents containing the interim financial information to see 
if any of it is materially inconsistent. 

3. inquiry concerning litigation, claims, and assessments— The auditor should inquire of 
legal counsel if information about litigation, claims, and assessments does not appear to be 
presented in accordance with the applicable financial reporting framework. 

4. Going-concern issues —If information indicates that there may be substantial doubt about 
an entity's ability to continue as a going concern, the auditor should inquire of management 
about plans for dealing with adverse effects and consider the adequacy of disclosure about 
such matters. 

5. The auditor should consider the reasonableness and consistency of management’s responses, 
but the auditor is not required to corroborate management's responses with other evidence. 

C. Evaluating the Results of interim Review Procedures —^The auditor should evaluate, 
individually and in the aggregate, misstatements to determine whether material modification 
should be made to the interim financial information. 

D. Written Representations from Management— The auditor should obtain written 
representations from management for all interim financial information presented as of the 
date of the auditor's review report. If management does not provide the written representation 
requested, the auditor should withdraw from the engagement to review the interim financial 
information. 

IV. Reporting on a Review of interim Financial Information 

A. Form of the Review Report —^The report should be in writing and include the following: 

1. Title 

2. Addressee , " 

3. An introductory paragraph 

4. A section on "Management's Responsibility forThe Financial Statements" 

5. A section on "Auditor's Responsibility" 

6. A concluding section that expresses conclusionsfriegatlve assurance) 

7. The signature, city and state, and date of die review report 

B. Each page of the interim financial information should be clearly marked unaudited. 

C. If Comparative Information is Presented that has not Been Reviewed— The report should 
indicate that the auditor assumes no responsibility for it. 

D. Modification of the Auditor's Review Report— When the Interim financial information has not 
been prepared in accordance with the applicable financial reporting framework in all material 
respects, the auditor should consider whether modification of the review report is sufficient to 
address the matter. 

1. If modification is sufficient —The auditor should modify the review report by describing 
the nature of the departure, and stating the effects on the interim financial information {or 
providing the appropriate information when disclosure is inadequate), if practicable. 

2. If modification is not sufficient—^The auditor should withdraw from the review engagement. 
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E. Interim Financial Information Accompanying Audited Financial Statements —^The auditor 
should include an other-matter paragraph in the report on audited financial statements when the 
following conditions exist: 

1. The interim financial information that has been reviewed is included in a document 
containing the audited financial statements. 

2. The interim information accompanying the audited financial statements does not appear to 
be presented in accordance with the applicable financial reporting framework. 

3. The auditor's separate review report, which refers to the departure, is not presented with the 
interim financial information. 

V. Sample Review Report of the Entity's Auditor 


Independent Auditor's Review Report 

(Appropriate Addressee) 

Report on the Financial Statements 

We have reviewed the accompanying {describe the interim financial information or statements reviewed) 
of ABC Company and subsidiaries as of September 30,20X1, and for the three-month and npriemonth 
periods then ended. 

Management's Responsibility 

The Company's management is responsible for the preparation and fair presentation of the interim 
financial information in accordance with (identify the applicable financial reporting framework; for 
example, accounting principles generally accepted In the United States of America); this responsibility 
includes the design, implementation, and maintenance of internal control sufficient to provide 
a reasonable basis for the preparation and fair presentation of interim financial information in 
accordance with the applicable financial reporting framework. 

Auditor's Responsibility 

Our responsibility is to conduct our review in accordance with auditing standards generally accepted 
in the United States of America applicable to reviews of intertrh financial information. A review of 
interim financial information consists principally of applying analytical procedures and making 
inguiries of persons responsible for financial and a£couptihg matters. It is substantiaily less in scope 
than an audit conducted in accordance with auditing standards generally accepted in the United 
States of America, the objective of which is the expression of an opinion regarding the financial 

information. Accordingly, we do not express such an opinioh. 

Conclusion ' 

Based on our review, we are not aware of any material modifications that should be made to the 
accompahyirsg interim financial information for it to be in accordance with {identify the appljcdble 
fmancial reponing framework; for example, accounting principles generally accepted in the United States 
of America). 

(Auditor's signature) 

(Auditor's city and state) 

(Dateofthe auditor's report) , 
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Vi. Filings with the SEC Under Federal Securities Statutes 

A. Relevant AlCPA Guidance—The relevant AlCPA guidance Is provided by AU 925, Filings with 
the US. SEC Under the Securities Act of 1933. The standard states that the auditor's objective is to 
perform specified procedures at or shortly before the effective date of the registration statement 
to sustain the burden of proof that the auditor has performed a reasonable investigation [under 
Section 11 (b)(3)(B)]. 


Definitions 

Auditor's Consent: A staternent signed and dated by the auditor giving consent to use th^fuditor's 
report in a registratiorfstatement. _ . - 

Awareness Letter. A letter signed anff da^ by th^i^diti^To ackrtowled the auditor's awareness^ 
that the review report on interim financial informatiprils being used in a registration statement (also ? 
known asan'acknoiWe<:^nient^tfertr,;5S8S*I^IvMii®llS^Si^^ ■ 

&fecWeDateoftheRegistration‘.l\\e date on which the registration statement becomes effective for 
Pburposes of evaluating the auditor^ liability undeTSei^Gn^TT of the Securities Act of 1933. 


B. Responsibilities under Federal Securities Statutes —^The Securities Act of 1933 promotes fair 

disclosure and prohibits fraud in initial public ofierings of securities. 

1. Management's responsibilities are the same as with the financial statements used for other 
purposes—that is, the financial statements are the representations of management. 

2. The independent accountant's responsibilities are similar to other types of reporting— 
Section 11 of the 1933 Act prohibits false or misleading statements (or material omissions) in 
registration statements. 

a. Section 11 defense—After a reasonable investigation, the independent accountant had 
reasonable grounds to believe that the financial statements were fairly stated (but the 
CPA has the burden of proof). 

b. Statutory responsibility Is determined in light of the circumstances on the effective date 
of the registration statement. 

c. The CPA should read the relevant partsof any prospectus filed under the 1933 Act 
to verify that the independent accountant's name is not being used inappropriately. 
(Note that a prospectus is an informational document required to be filed with the SEC 
in connection with a registration statementto offer securities for sale; the prospectus 
cannot be used to finalize sales of such securities until the registration statement is 
declared effective by the SEC.) 

d. When the registration statement references the interim financial information reviewed 
by the accountant—the prospectus should elearly lndicate that the review report is not 
part of the registration statement within the meaning of the 1933 Act. The auditor's 
review report is only required if the registration statement indicates that the unaudited 
interim information has been reviewed. (If unaudited financial statements are presented 
along with audited financial statements in a filing with the SEC, the unaudited financial 
statements should be labeled "unaudited"and should not be referenced in the auditor's 
report.) 

C. Subsequent Events Procedures in Connection with Filings under the Securities Act of 1933 

1 . Extend the procedures regarding subsequent events from the audit report date up to (or as 
near as practicable) to the effective date of the registration statement. 

2. Following fieldwork, the auditor may usually rely on inquiries of appropriate client 
personnel—obtain written representations from management regarding those financial and 
accounting matters. 
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3. An auditor who has reported on the financial statements from prior periods, but not the most 
recent audited financial statements included in the registration statement, is responsible for 
events subsequent to the date of the prior-period's audited financial statements. The auditor 
should: 

a. Read the applicable portions of the prospectus and registration statement. 

b. Obtain a letter of representations from the successor auditor as to whether the 
successor's audit identified any matters that might have a material effect on the prior 
period's financial statements. 
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independent Auditor's Report 

(AppropriateAddressee) 

Report on the Financiai Statements^ 

We have audited the accompanying consolidated financial statements of ABC Company and its 
subsidiaries, which comprise the consolidated balance sheets as of December 31,20X1 and 20X0, and 
the related consolidated statements of Income, changes in stockholders'equity and cash flows for the 
years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these consolidated financial 
statements in accordance with accounting principles generally accepted in the United States of 
America; this includes the design, implementation, and maintenance of internal control relevant to 
the preparation and fair presentation of consolidated financial statements that are free from material 
misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on our 
audits. We conducted our audits in accordance with auditing standards generally accepted in the United 
States of America. Those standards require that we plan and perform the audit to obtain reasonable 
assurance about whether the consolidated financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropnatein the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of tfie entity’s internal control.^ Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significanraccQunfing estimates made by management, as 
well as evaluating the overall presentation of the consolidated financial statements. 

We believe that the audit evidence we have obtained is Sufficfent and appropriate to provide a basis 
for our audit opinion. ' . 

Opinion 

in our opinion, the consolidated financial statements referred to above present fairly, in all material 
respects, the financial position of ABC Company and its subsidiaries as of December 31,20X1 and 
20X0, and the results of their operations and their cash flows for the years then ended in accordance 
with accounting principles generally accepted inthe United States of America. 

Report on Other Legal and Regulatory Requirements 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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’Theiubtitlp'Reporton tin I k)dn( lol St \H mont i unneo-*'wiy in i ircumsl-mcob w‘^en lo-- wo'.J 
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Independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying consolidated financial statementsof ABC Company and its 
' subsidiaries, v^hich comprise the consolidated balance sheets as of December 31,20X1 and 20X0, and 
the reiatedxonsolidated statements of income, changes In stockholders'equity and cash flows for the 
years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management Is responsible for the preparation and fair presentation of these consolidated financial 
statements in accordance with accoun^ng principles generally accepted in the United States of 
America; this includes the design, implementation, and maintenance of internal control relevant to 
the preparation and fair presentation of consolidated financial statements that are free from material 
: misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on our 
audits. We conducted our audits in accordance with auditing standards generally accepted in the 
United States of America. Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether the consolidated financial statements are free from materia! I 
misstatement. 

An audit Involves performing procedures to obtain audit evidenc-e about the amounts and 
disclosures in the consolidated financial statements.The procedures selected depend on the 
auditor's judgment, including the assessment of the risks of material misstatement of the 
consolidated financial statements, whether due to fraud or error. In making those risk assessments, 
the auditor considers interna! control relevant to the entity's preparation and fair presentation of the 
consolidated financial statements in order to design audit procedures that are appropriate in 
the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the 
entity's internal control.’ Accordingly, we express no such.opinion. An audit also includes evaluating 
the appropriateness of accounting policies used and the re 9 sohabjeness of significant accounting 
estimates made by management, as well as evaluating the overall presentation of the consolidated 
financial statements. 

We believe that the audit evidence we have obtained is suffrdent and appropriate to provide a basis 
for our audit opinion. - 

Opinion 

In our opinion, the consolidated financial statements referred to above present fairly, in ail material 
respects, the financial position ofABC Company and its subsidiaries as of December 31,20X1 and 
20X0, and the resuits of their operations and their cash flows for the years then ended in accordance 
with accounting principles generally accepted in the United States of America. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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’ When the auditor has responsibility for expressing an opinion bn th^ efifetiweness of interh^^^^^ 
control in conjunction with the J&itoftheenti1y7sflnanclal^atements, the sentence would be 
stated as follows:"In making thllensfcassessmefitssitheaudltor.considers internal control relevant 
to the entity's preparation and fair presentation of the consolidated financial statements in order to 
design audit procedures that are appropriate in the circumstances." In addition^ the next sentence, 
'^ccOrdihgly, we express no suqfepinlon,"would be omitted^ 




Unmodified Opinion (Sentence by Sentence 


Independent Auditor's Report 

(Appropriate Addressee) 

(Introductory Paragraph) 

We have audited the accompanying consolidated financial statements of ABC Company and its 
subsidiaries, which comprise the consolidated balance sheets as of December 31,20X1 and 20X0, and 
the related consolidated statements of Income, changes In stockholders' equity and cash flows for the 
years then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these consolidated financial 
statements in accordance with accounting principles generally accepted in the .United States of 
America; this includes the design, implementation, and maintenance of interna! control relevant to 
the preparation and fair presentation of consolidated financial statements that are free from material 
misstatement, whether due to fraud or error. 

Auditor's Responsibility 

(First of three paragraphs) 

1. Our responsibility is to express an opinion on these consolidated financial statements based on our 
audits. 

2. We conducted our audits in accordance with auditing standards generally accepted in the United 
States of America. 

3. Those standards require that we plan and perform the audit to obtain reasonable assurance about 
whether the consolidated financial statements are free from material misstatement. 

(Second of three paragraphs) 

4. An audit involves performing procedures to obtain audit evIdejTpe a'bout the amounts and 
disclosures in the consolidated financlai statements. 

5. The procedures selected depend on the auditor's judgment; Including the assessment of the risks 
of material misstatement of the consolidated financial statements, whether due to fraud or error. 

6. In making those risk-assessments, the auditor considers internal control relevant to the entity's 
preparation and fair presentation of the consolidated financial statements in order to design audit 
procedures that are appropriate in the circumstances^,but not for the purpose of expressing an 
opinion on the effectiveness of the entity's internal control: 

7. Accordingly, we express no such opinion. 

8. An audit also includes evaluating the appropriateness of accounting policies used and the 
reasonableness of significant accounting estimates made by management, as well as evaluating the 
overall presentation of the consolidated financial statements. (Third of three paragraphs) 

9. We believe that the audit evidence we have obtained Is sufficient and appropriate to provide a basis 
for our audit opinion. 

Opinion 

In our opinion, the consolidated financial statements referred to above present fairly, in all material 
respects, the financial position of ABC Company and Its subsidiaries as of December 31,20X1 and 
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20X0, and the results of their operations andtW^h fibwsforthe years then ended In accordance 
with accounting principles generally accepted ih^e Uhited Stat« of America. 

ISyfeStheautefer^b^ O;'-'--;:'/'' 
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(Appropriate Addressee) 

We have audited the accompanying financial statements of ABC Company, which comprise the 
balance sheet as of December 31,20X2 and 20X1, and the related statements of income, changes in 
stockholders'equity and cash flows for the years then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of Interna! control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audits. Except 
as explained in the Basis for Disclaimer of Opinion paragraph, we conducted our audits in accordance 
with auditing standards generally accepted in the United States of America. Those standards require 
that we plan and perform the audit to obtain reasonable assurance about whether the financial 
statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of-the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
interna! control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinions on the balance sheets as of December 31,20X2 and 20X1, and the statements of 
income, changes in stockholders' equity and cash flows for the ye'ar ended December 31,20X2. 

Basis for Disclaimer of Opinion on 20X1 Operations and:Cash Flows 

We did not observe the taking of the physical inventory as of December 31,20X0, since that date 
was prior to our appointment as auditors for the Company, and we were unable to satisfy ourselves 
regarding Inventory quantities by means of other auditing procedures. Inventory amounts as of 
December 31,20X0 enter into the determination of net Income and cash flows for the year ended 
December 31,20X1 

Disclaimer of Opinion on 20X1 Operations and Cash Flows 

Because of the significance of the matter described in the Basis for Disclaimer of Opinion paragraph, 
we have not been able to obtain sufficient appropriate audit evidence to provide a basis for an 
audit opinion on the results of operations and cash flows for the year ended December 31,20X1, 
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Accordingly, we do not express an opinion on'the results of operations and cash flows for the year 
ended December 31,20X1. 


Opinion 

!'• i: J:i rs.,'i.icesheetsof ABC Company asofDectiinber.li, 20X2 ano J0X‘ -nuj'r.s 

statements of income, c^gKijSstod^olders'equity and cash flows for the year ended December 
31 ,20X2, present fairly, ^Sj^ai^ak^pects, the financial position of ABC Company as of December 
I i.u 'n/i j’lrJtheresultsofltsopHt.HionsanditicashflowNfoi ilH’v.at c‘iul uiV-.-mh*1 

20X2 in accordance witl{l^^ni^i^^^j;iciples genersiiy accepted ip the United Stati s of Am t i : 

(Auditor's signature) ■ . - ^ - 

(Auditor's city and ^ ^ V'- 

(Date ofthe auditor's report) " ^ ’c4V’'.‘ ^'-'1 ' ■' • ' ‘ 




Independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statements of ABG Company, which comprise the r 
balance sheet as of December 31,20X1 and 20X0, and the related statements of income, changes in 
stockholders'equity and cash flows for the years then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and rnaintenance of Interna! control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audits. We 
conducted our audits in accordance with auditing standards generally accepted in the United States of : 
America.Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and 
disclosures in the consolidated financial statements.The procedures selected depend on the 
auditor's judgment, including the assessment of the risks of material misstatement of the 
consolidated financial statements, whether due to fraud or error.-!n making those risk assessments, 
the auditor considers Internal control relevant to the entity's preparation and fair presentation of the 
consolidated financial statements in order to design audit procedures that are appropriate in the 
circumstances, but not for the purpose of expressing an opinion on the effectiveness of the entity's 
Internal control. Accordingly, we express, no such opinion. An audit also includes evaluating the 
appropriateness of accounting policies used and the reasonableness of significant accounting 
estimates made by management, as well as evaluating the overall presentation of the financial 
statements. ... . 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our qualified audit opinion. 

Basts for Qualified Opinion - 

The Company has excluded, from property and debt lnThe accompanying 20X1 balance sheet, 
certain lease obligations that were entered into In 20 X 1 which, in our opinion, should be 
capitalized in accordance with accounting principles generally accepted in the United States of : 
America, if these lease obligations were capitalized property would be increased by $xxx, long^ 
term debt by $xxx,and retained earnings by $xxxas of December 31,20X1, and net income and 
earnings per share would be increased (decreased) by $xxxand $xxx, respectively, for the year 
then ended. 

Qualified Opinion 

In our opinion, except for the effects on the 20X1 financial statements of not capitalizing certain 
lease obligations as described in the Basis for Qualified Opinion paragraph, the financial statements 
referred to above present fairly, in ail material respects, the financial position of ABC Company as of 
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December 31, 20X1 and 20X0, and the t( suits fi1 It 'ipei.juoiis.»ndiisLii »i'h 

ended in accordance with accounuiKj pm»‘ ipU’" »j< nc-r.illy .itrr in ih' Unitin- s'« 

Mudftor^ signature) 

ditor's city and State) 

teoftheauditor^K 
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independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statemertts of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of income, changes in 
stockholders'equity and cash flows for the year then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of internal control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. , 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted In the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
Including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
Internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation of the financial statements. 

We believe that the audit evidence we have obtained is sufficien^d appropriate to provide a basis 
for our qualified audit opinion. 

Basis for Qualified Opinion ; 

ABC Company's investment in XYZ Company, a foreigri affiliate acquired during the year and 
accounted for under the equity method, is carried at Sxxx on the balance sheet at December 31,20X1, 
and ABC Company's share of XYZ Company's net income pf<$xxx is included in ABC Company's net 
income for the year then ended. We were unable to obtain suffident appropriate audit evidence about 
the carrying amount of ABC Company's investment In XY^Company as of December 31,20X1 and 
ABC Company's share of XYZ Company's net income for the year then ended because we were denied 
access to the financial information, management, and the auditors of XYZ Company. Consequently, we 
were unable to determine whether any adjustments to these amounts were necessary. 
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Qualified Opinion 

In our opinion, except for the possible effecis of d^cribed in the Basis for Qualified Opinion 

paragraph, the financial staternents-referr®!present felriy, in ali material respects, the 
financial position of ABC Company as of Desetorjbef^l, 20X1,.and the results of its operations and its 
cash flows for the year then ended in acasrdamce^h accounting principles generally accepted in the 
United States of America. 

(Auditor's signature) . 

(Auditor's city and state) 5^2^ 

(Date of the auditor's report^iS^^S 
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Independent Auditor's Report 

(Appropriate Addressee): 

Report on the Financial Statements* 

We have audited the accompanying financial statements of ABC Company, which comprise the 
balance sheet as of December 31,20X1 and 20X0, and the related statements of income, changes in 
stockholders'equity and cash flows for the years then ended, and the related notes to the financial 
statementsv 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, lmplementation,.and maintenance of interna! control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibiiity 

Our responsibility is to express an opinion on these financial statements based on our audits. We 
conducted our audits In accordance with auditing standards generally accepted in the United States of . 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit Involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement pf-the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accountingpstirhates made by management, as 
well as evaluating the overall presentation of the financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for ourqualifled audit opinion. :: 

Basis for Qualified Opinion . - 

The Company has stated inventories at cost In the accornpanying balance sheets. Accounting 
principles generally accepted in the United States of America require inventories to be stated atthe 
lower of cost or market If the Company stated inventories at the lower of cost or market, a write 
down of $xxx and $xxx would have been required as of December 31,20X1 and 20X0, respectively. 
Accordingly, cost of sales would have been Increased by $xxx and $xxx, and net income, income taxes, 
and stockholders'equity would have been reduced by $xxx, $xxx,and $xxx, and $xxx, $xxx, and $xxx, 
as of and for the years then ended in accordance with accounting principles generally accepted in the 
United Statespf America. 

Qualified Opinion 

In our opinion, except for the effects of the matter described in the Basis for Qualified Opinion 
paragraph, the financial statements referred to above present fairly, In ail material respects, the 
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financial position of ABC Company as 20X0, and the results of its operations 

and Its cash flows for the years then ended m accounting principles generally 

Report on Other Legal and Regulatory Rej|uii«ments^^: : :: 

(Form and content of this section of the audftodi'i^oftwB v^ry depending on the nature of the 

(Date oftheauditor!s report) ^ 

■The subtitle "Reportpn the Finanaal Statements" is unnecessaiy in the secondib 

subtitle, "Repoititf^O^ir^egal and Regulatory Requirements,% nptfpplj^e.'.^^-^ - A 


Qualified for 




Independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statements of ABC Company, which comprise the 
balance sheet as of December 31,20X1 and 20X0, and the related statements of income, changes In 
stockholders'equity and cash flows for the years then ended, and the related notes to the financial 
staterhents. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of Internal control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audits. We 
conducted our audits in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from materia! misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement ofthe consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation ofthe consolidated financial 
statements in order to design audit procedures that are appropriate In the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness ofthe entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation ofthe financial statements. 

We believe that the audit evidence we have obtained is sulficienfand appropriate to provide a basis 
for our qualified audit opinion. . > 

Basis for Qualified Opinion 

The company's financial statements do not disclose {describe th^ nature ofthe omitted information 
that is not practicable to present in the auditor's report). In pur opinion, disclosure of this information is | 
required by accounting principles generally accepted In the United States of America. 

Qualified Opinion 

In our opinion, except for the omission ofthe information described in the Basis for Qualified 
Opinion paragraph, the financial statements referred to above present fairly, in ail material respects, 
thefinancialpositionof ABC CompanyasofDecemberSl,20X1 and 20X0, and the results of its 
operations and Its cash flows for the years then ended In accordance with accounting principles 
generally accepted in the United States of America. 

(Auditor's signature) 

(Auditor's city and state), ' 

(Date of the auditor's report) 
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Independent Auditor's Report 

(Appropriate Addressee} 

We have audited the accompanying consolidated financial statements of ABC Company and its 
subsidiaries, which comprise the consolidated balance sheets as of December 31,20X1, and the 
related consolidated statements of income, changes In stockholders' equity and cash flows for the year 
then ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these consolidated financial 
Statements In accordance with accounting principles generally accepted in the United States of 
America; this includes the design, implementation, and maintenance of internal control relevant to 
the preparation and fair presentationdf consolidated financial statements that are free from material 
misstatement, whether due to fraud or error. 

Auditor^ Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on 
our audit We conducted our audit in accordance with auditing standards generally accepted 
in the United States of America. Those standards require that we plan and perform the audit 
to obtain reasonable assurance about whether the financial statements are free from material 
misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and 
disclosures in the consolidated financial statements. The procedures selected depend on the 
auditor's judgment, including the assessment of the risks of material misstatement of the 
consolidated financial statements, whether due to fraud or error, in making those risk assessments, 
the auditor considers internal control relevant to the entity's preparation and fair presentation of the 
consolidated financial statements in order to design audit procedures that are appropriate in the 
circumstances, but not for the purpose of expressing an opinion on the effectiveness of the entity's 
internal control. Accordingly, we express no such opinion. An^dit also includes evaluating the 
appropriateness of accounting policies used and the reasonableness of significant accounting 
estimates made by management, as well as evaluating the overall presentation of the consolidated 
financial statements. , - 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our adverse audit opinion, 

Basis for Adverse Opinion - ^ 

As described in Note X, the Company has not consolidated the financial statements of subsidiary 
XYZ Company that it acquired during 20X1 because it has not yet been able to ascertain the fair 
values of certain of the subsidiary's material assets and liabilities at the acquisition date.lhls 
investment is therefore accounted for on a cost basis by the Company. Under accounting principles 
generally accepted In the United States of America, the subsidiary should have been consolidated 
because it is controlled by the Company. Had XYZ Company been consolidated, many elements 
in the accompanying consolidated financial statements would have been materially affected. 

The effects on the consolidated financial statements of the failure to consolidate ha ve not been 
determined. 
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Independent Auditor's Report 


(Appropriate Addressee) 


Report on the Financial Statements* 

We were engaged to audit the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of income, changes in 
stockhplders'equity and cash flows for the year then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
m accordance with accounting principles generally accepted in the United States of America; this 
includes the design, impiementattdn, and maintenance of internal control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility Is to express an opinion on these financial statements based on conducting the < 
audit in accordance with auditing standards generally accepted in the United States of America. 
Because of the matter described in the Basis for Disclaimer of Opinion paragraph, however, we were 
not able to obtain sufficient appropriate audit evidence to provide a basis for an audit opinion. 

Basis for Disclaimer of Opinion 

The company's investment in XY2 Company, a joint venture, is carried at $xxx on the Company's 
balance sheet, which represents over 90% of the Company's net assets as of December 31,20X1. We 
were not allowed access to the management and the auditors of XY2 Company. As a result, we were 
unable to determine whether any adjustments were necessary relating to the Company's proportionai 
share of XYZ Company's assets that it controls jointly, its proportional share of XYZ Company's 
liabilities for which it is jointly responsible, its proportional share of XYZ Company's income and 
expenses for the year, and the elements making up the statements of changes In stockholders'equity 
and cash flows. ... 

Disclaimer of Opinion ^ 

Because of the significance of the matter described in the Basis for Disclaimer of Opinion paragraph, 
we have not been able to obtain sufficient appropriate audit evidence to provide a basis for an audit 
opinion. Accordingly, we do not express an opinion bn these financial statements. 

Report on Other Legal and Regulatory Requirements 

(Form and content of this section of the auditor's report will vary depending on the nature of the; 
auditor's other reporting responsibilities.) 

(Auditor's signature) v j 

(Auditor's city and state) 

(Date ofthe auditor's report) ^ 

'The subtitle "Report on the Financial 5tatements"is unnecessary in circumstances when the second 
subtitle, "Report on Other Legal and Regulatory Requlrements,''is not applicable. 







Sample report with a disclaimer of opinion on results of operations and cash flows and an 
unmodified ppihton on financial position {due to inability to verify opening inventory): 


Independent Auditor's Report 



We have audited the accompanying balance sheet of ABC Company, as of December 31,20X1, and 
were engaged to audit the related statements of Income, changes in stockholders'equity, and cash 
j'lows for ended, and the related notes to the financial statements. 

Management's Responsibility for the.Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of interna! control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on conducting the 
audit in accordance with auditing standards generally accepted in the United States of America. 
Because of the matters described in the Basis for Disclaimer of Opinion paragraph, however, we were 
not able to obtain sufficient appropriate audit evidence to provide a basis for an audit opinion on the 
income statement and the cash flow statement. 

We conducted our audit of the balance sheet In accordance with auditing standards generally 
accepted In the United States of America. Those standards require that we plan and perform the audit 
to obtain reasonable assurance about whether the balance sheet is free of material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement^ the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and'fair presentation of the consolidated financial 
statements in order to design audit procedures that are^ppropriate In the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accourfting,estimates made by management, as 
well as evaluating the overall presentation of the flnanclal-statGrnen,ts. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for bur unmodified opinion on the financial position. 

Basis for Disclaimer of Opinion on the Results of Operations and Cash Flows 

We were not appointed as auditors of the company until after December 31,20X0, and thus did not 
observe the counting of the physical inventories at the beginning of the year. We were unable to 
satis^ ourselves by alternative means concerning Inventory quantities held at December 31,20X0. 
Since opening inventories enter into the determination of the net Income and cash flows, we were 
unable to determine whether adjustments might have been necessary relating to the profit for the 
year reported in the income statement and the net cash flows from operating activities reported In the 
cash flow statement. 
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Disclaimer of Opinion on the Results of OperaiMons^and Cash Flows 

Because of the 

we have not been able to obtain suffictentapp^iwl^audit evidence to provide a basis for an audit 
opinion on the income statement andthe Accordingly, we do not express an 

opinion on the 

Opinion on the Financial Position ^ ^ ^ ^ 

tn our opinion, the balance sheet pr^ents fairiy-'in ail material respects, the financial position of ABC 
Company, as of December 31,20X1, in accordance witti accounting principles generally accepted in 
the United States ctf^erica.:;/V; 


independent Auditor's Report 

{Appropriate Addressee) 

Report on the Financia! Statements 

We Have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of Income, changes in 
stockholders'equity and cash flows for the year then ended, and the related notes to the financial 
statements. 

Management's Responsibiiftyfor the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
; in accordance with accounting principjes generally accepted in the United States of America; this 
i includes the design, implementation, and maintenance of Internal control relevant to the preparation 
i and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence aboutthe amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, including the 
assessment of the risks of material misstatement ofthe financial statements, whether due to fraud or 
error. In making those risk assessments, the auditor considers internal control relevant to the entity's 
preparation and fair presentation of the financial statements In order to design audit procedures 
that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control.’ Accordingly, we express no such opinion. An audit also 
includes evaluating the appropriateness of accounting policies^ised and the reasonableness of 
significant accounting estimates made by management, as well as evaluating the overall presentation 
ofthe financial statements. , ^ 

We believe that the audit evidence we have obtained is ,sufficient and appropriate to provide a basis 
for our audit opinion. ' 

Opinion 

In our opinion, the financial statements referred to aEove present fairly, in all material respects, the 
financial position of ABC Company as of December 31,20X1, and the results of its operations and its 
cash flows for the year then ended in accordance with accounting principles generally accepted in the 
United States of America. 

Emphasis of Matter 

As discussed in Note X to the financial statements, the Company Is a defendant in a lawsuit {briefly 
describe the nature ofthe litigation consistent with the Company's description in the note to the financial 
sfufemenfs). Our opinion is not modified with respecttothis matter. 
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independent Auditor's Report 

(Appropriate Addressee) : 

Report on the Financiai Statements 

We have audited the accompanying financiai statements of ABC Company, which comprise the 
balance sheet as of December 31,20X1 and 20X0, and the related statements of income, changes in 
stockholders'equity and cash flows for the years then ended, and the related notes to the financial 
staiements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
In accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of internal control relevant to the preparation 
and fair presentation of financial statements that are free from materia! misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audits. We 
conducted our audits in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit Involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, including the 
assessment of the risks of material misstatement of the financial statements, whether due to fraud or 
error. In making those risk assessments, the auditor considers internal control relevant to the entity's 
preparation and fair presentation of the financial statements in order to design audit procedures 
that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
eflectiveness of the entity's internal control. Accordingly, we express np such opinion. An audit also 
includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as well as evaluating the overall presentation 
ofthefinancial statements. : ' 

We believe that the audit evidence we have obtainedts sufficient and appropriate to provide a basis 
for our audit opinion. , • 

Ojpinion 

In our opinion, the financial statements referred to above present fairly, in all material respects, the 
rfinariciM position of ABC Company as of December 31,20X1 and 20X0, and the results of its operations ; 
: and its cash flows for the years then ended in accordance with accounting principles generally 
accepted inthe United States of America. 

OtherMatter 

In our report dated March 1,20X1, we expressed an opinion that the 20X0 financial statements did 
not fairly present the financial position, results of operations, and cash flows of ABC Company in 
i accordance with accounting prindpies generally accepted In the United States of America because 
' of two departuresfrbm such prindpies: (1) ABC Company carried Its property, plant, and equipment 
' at appraisal values, and provided for depreciation on the basis of such values, and (2) ABC Company 
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Report on Other Legal and Regulatory Requirements 
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(Auditor's city and slate) ^ 

(Date of the auditor's report) ' T i: , 





Independent Auditor's Report 

(Appropriate Addressee) ; 

Report on the Consolidated Financial Statements 

We have audited the accompanying consolidated financial statements of ABC Company and its 
sufosidiaries, which comprise the consolidated balance sheets as of December 31,20X1 and 20X0, and 
the related consolidated statements of income, changes In stockhoiders'equity and cash flows for the 
years theh ended, and the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these consolidated financial 
statements in accordance with accounting principles generally accepted in the United States of 
America; this includes the design, impjementation and maintenance of internal control relevant to 
the preparation and fair presentation of consolidated financial statements that are free from material 
misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these consolidated financial statements based on our 
audit. We did not audit the financial statements of B Company, a wholly-owned subsidiary, whose 
statements reflect total assets and revenues constituting 20% and 22%, respectively, of the related 
consolidated totals. Those statements were audited by other auditors, whose report has been 
furnished to us, and our opinion, insofar as it relates to the amounts included for B Company) Is based 
solely on the report of the other auditors. We conducted our audits in accordance with auditing 
standards generally accepted in the United States of America. Those standards require that we plan 
and perform the audit to obtain reasonable assurance about whether the consolidated financial 
statements are free from material misstatement 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the consolidated financial statements. The procedures selected depend on the auditor's judgment, 
including the assessment of the risks of material misstatement of the consolidated financial 
statements, whether due to fraud or error. In making those risk assessments, the auditor considers 
internal control relevant to the entity's preparation and fair presentation of the consolidated financial 
statements in order to design audit procedures that are-appropriate in the circumstances, but not for 
the purpose of expressing an opinion on the effectiveness of the entity's internal control. Accordingly, 
we express no such opinion. An audit also includes evaluating the appropriateness of accounting 
policies used and the reasonableness of significant accounting estimates made by management, as 
well as evaluating the overall presentation oftheconsolidatedfjnanciai statements. ; 

We believe that the audit evidence we have obtained Is^ufficient and appropriate to provide a basis 
for our audit opinion. : - 

Opinion 

In our opinion, based on our audit and the report of the other auditors, the consolidated financial 
statements referred to above presents fairly, In all material respects, the financial position of ABC 
Company and its subsidiaries as of December 3T, 20X1 and 20X2, in accordance with accounting 
principles generally accepted In the United States of America. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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Independent Auditor's Report 


(Appropriate Addressee) ; 

We have audited the accompanying balance sheet of ABC Compariy as of December 31,20X1, and the 
related notes (the financial statement). 


Management's Responsibility for theFinanciai Statements 

Management is responsible for the preparation and fair presentation of the financial statement 
In accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of Internal control relevantto the preparation 
and fair presentation of the financial statement that is free from material misstatement, whether due 
to fraud or error. . 


Auditor's Responsibility 

Our responsibility is to express an opinion on the financial statement based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statement is free from material misstatement. 


An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statement The procedures selected depend on the auditor’s judgment, including the 
assessment of the risks of material misstatement of the financial statement, whether due to fraud or 
error, in making those risk assessments, the auditor considers Internal control relevant to the entity's 
preparation and fair presentation of the financial statement in order to design audit procedures 
that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control. Accordingly, we express no such opinion. An audit also 
includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as well as evaluating the overai) presentation 
ofthe financial statement. 


We believe that the audit evidence we have obtained is suffici^t a^nd appropriate to provide a basis 
for our audit opinion. 


Opinion 

In our opinion, the financial statement referred to above presents fairly, in ail material respects, the 
finandai position of ABC Company as of December 31,20XT7in accordance with accounting principles 
generally accepted in the United States of America. . , 

' — ' ' ' ' ' - ' ■ - 

(Auditor's signature) .. 

(Auditor's city and.state) . 

(Date of the auditor's report) 
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independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying schedule of royalties applicable to engine production of the Q 
Division of ABC Company for the year ended December 31,20X1, and the related notes (the schedule). 

Management's Responsibility for the Financial Statements 

Management is respoiisible for the preparation and fair presentation of the schedule in accordance with 
the financial reporting provisions of Section Z of the license agreement between ABC Company and 
XYZ Corporation dated January 1,20X1 (the contract). Management is also responsible for the design, 
implementation, and maintenance of internal control relevant to the preparation and fair presentation of 
financial statements that are free from material misstatement, whether due to fraud or error. 

Auditor's Responsibility ^ 

Our responsibility is to express an opinion on the schedule based on our audit. We conducted our 
audit in accordance with auditing standards generally accepted in the United States of America. Those 
standards require that we plan and perform the audit to obtain reasonable assurance about whether 
the schedule is free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the schedule. The procedures selected depend on the auditor's judgment, including the assessment 
of the risks of material misstatement of the schedule, whether due to fraud or error. In making 
those risk assessments, the auditor considers Internal control relevant to the entity's preparation 
and fair presentation of the schedule in order to design audit procedures that are appropriate in 
the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the 
entity's internal control. Accordingly, we express no such opinion. An audit also includes evaluating ! 
the appropriateness of accounting policies used and the reasonableness of significant accounting 
estimates made by management, as well as evaluating the overall presentation of the schedule. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinion. 

Opinion ^ 

In our opinion, the schedule referred to above presents fairly, in all material respects, the royalties 
applicable to engine production of the Q Division of ABj2Company for the year ended December 31, 
20X1, in accordance with the financial reporting provisions of Section Z of the contract. 

Basis of Accounting • 

We draw attention to Note Xofthe schedule, which describes the basis of accounting. The schedule 
was prepared by ABC Company on the basis of the firr^hcial reporting provisions of Section Z of the 
contract, which is a basis of accounting other thah accounting principles generally accepted In the 
United States of America, to comply with the financial reporting of the contract referred to above. Our 
opinion is not modified with respect to this matter. 

Restriction on Use 

Our report is intended solely for the information and use of ABC Company and XYZ Corporation and is 
not intended to be and should notbeused by anyone other than these specified parties. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying Historical Summaries of Gross income and Direct Operating 
Expenses of ABC Apartments for each of the three years in the period ended December 31,20X1, and 
the reiated notes (the historical summaries). 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these historical summaries 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of internal control relevant to the preparation 
and fair presentation of the financial statement that Is free from material misstatement, whether due 
to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on the historical summaries based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the historical summaries are free from material misstatement. 

An audit Involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the historical summaries. The procedures selected depend on the auditor's judgment, including the 
assessment of the risks of material misstatement of the historical summaries, whether due to fraud or 
error. In making those risk assessments, the auditor considers Internal control relevant to the entity's 
preparation and fair presentation of the historical summaries in order to design audit procedures 
that are appropriate In the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's interna! control. Accordingly, we express no such opinion. An audit also 
Includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as well as evaluating the overall presentation 
ofthe historical summaries. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinion. 

Opmlon 

in our opinion, the historical summaries referred to above present fairly, in ail material respects, the 
gross income and direct operating expenses described in ijote X of ABC Apartments for each of 
the three years in the period ended December 31,2pXT,1n,acc'ordance with accounting principles ; 
/ generally accepted in the United States of America' , 

Emphasis of Matter 

: We draw attention to Note X to the historical summaries, which describes that the accompanying 
histor^^^ prepared for the purpose of complying with the rules and regulations of 

Regulator DEF (for inclusion in the filing of Form Z of ABC Company) and are not intended to be a 
eornplete presentation ofthe company's revenues and expenses. Our opinion Is not modified with 
respect to this matter. 

(Auditor's signature) 

(Auditor's city and state) 

(Dateofthe auditor's report) • ■ 
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(Sometimes called a Second Opinipnji 
Introduction 

-We have been engaged to report on the appropriate application of the requirements of accounting 
principles generally accepted in the United States of America to the specjfigtransaction described 
below. This report is being issued to ABC Company for assistance in evaluating accounting policies 
for the described specific transaction. Our engagement has been conductedin accordance with the 
Statement on Auditing Standards Reports on Application of Requirements of an Applicable Rnancial 
Reporting Framework. 

Description of Transactions ' ' 

The factSi circumstances, and assumptions relevant to the specific transaction as provided to us by the 
management of ABC Company are as follows: 

{Include text discussing the facts, circumstances, and assumptions relevant to the specific transaction.) 

Appropriate Accounting Principles 


they apply to the described transaction.) 

Concluding Comments 

The ultimate responsibility for the decision on the appropriate application of the requirements of 
accounting principles generally accepted in the United States of America for an actual transaction 
rests with the preparers of financial statements, who should consult with their continuing accountant. 
Ourconelusion on the appropriate application of the requirements of accounting principles generally 
accepted in the United States of America for the described specific transaction is based solely on 
the facts provided to us as previously described; should these facts and circumstances differ, our 
cpnelusion may change. 

Restricted Use ^ 

This report is Intended solely for the information and use of those charged with governance and 
management of ABC Company and Is not intended to be and should not be used by anyone other 
than these spedfled parties, - ' : 
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Independent Auditor's Report 


The accQmpanymg summary financial statements, which conriprise the summary balance sheet as of 
December 31,20X1, the summary income statement, summary statement of changes in stockholders' 
equity and summary cash flow statement for the year then ended, and the related notes, are derived 
from the audited financial statements of ABC Company as of and for the year ended December 31, 
20X1. We expressed an unmodified audit opinion on those audited financial statements in our report 
dated February 15,20X2. The audited financial statements, and the summary financial statements 
derived therefrom, do not reflect the effects of events, If any, that occurred subsequent to the date of 
our report on the audited financial statements. 


The summary financial statements do not contain all the disclosures required by (describe financial : 

reporting framework applied in thepreparation of the financial statements of ABC Company). Reading 
the surhmary financial statements, therefore, is not a substitute for reading the audited financial ' 

statements of ABC Company. 

Management's Responsibility for the Summary Financial Statements 


Management is responsible for the preparation ofthe summary financial statements on the basis ; 
described in Note X, 

Auditor's Responsibility 


Our responsibility is to express an opinion about whether the summary financial statements are 
consistent, in all material respects, with the audited financial statements based on our procedures, 
which were conducted in accordance with auditing standards generally accepted in the United States 
of America, The procedures consisted principally of comparing the summary financial statements 
with the related information In the audited financial statements from which the summary financial 
statements have been derived, and evaluating whether the summary financial statements are 
prepared in accordance with the basis described In Note X. We did not perform any audit procedures 
regarding the audited financial statements after the date of our report on those financial statemerits. 

Opinion 

In our opinion, the summary financial statementsjof ABC Company as of and for the year ended 
December 31,20X1 referred to above are consistent. In ail material respects, with the audited financial 
statements from which they have been derived, on the basiS'descrlbed in Note X. 

(Auditor's signature) ..r- . - 

(Auditor's city and state) 

(Date ofthe auditor's report) 
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Re¥lew Report on Interim Financial Statement 


Independent Auditor's Report 

(Appropriate Addressee) 

Report on the Financial Statements 

We have reviewed the accompanying {describe the inten'iv financial information dr statements reviewed) 
of ABC Company and subsidiaries as bf September 30,20X1, and for the three-month and nine-rnonth 
periods^ / 

Management's Responsibility 

the Company's management is responsible for the preparation and fair presentation of the interim: 
financial information in accordance with {identify the applicable financial reporting framework; for 
exampie, accounting pr/nc;p/es generalfy accepted in the United States of America); this responsibility 
includes the design, implementatioh, and maintenance of Internal control sufficient to provide 
a reasonable basis for the preparation and fair presentation of interim financial information in 



Auditor's Responsibility 


Our responsibility is to conduct our review in accordance with auditing standards generally accepted 
in the United States of America applicable to reviews of interim financial information. A review of 
interim financial information consists principally of applying analytical procedures and making 
Inquiries of persons responsible for financial and accounting matters. It is substantially less In scope 
than an audit conducted in accordance with auditing standards generally accepted in the United 
States of America, the objective of which is the expression of an opinion regarding the financial 
Information. Accordingly, we do not express such an opinion. ' 

Conclusion 

Based on our review, we are not aware of any material modifications that should be made to the 
accompanying interim financial information for it to be in accordance with (identify the applicable 
financial reporting framework; for example, accounting principle^enerally accepted in the United States 
of America). 

(Auditor's signature) ' 

(Auditor's city and state) 

(Date ofthe auditor's report) . - 
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Other Reports 

Reports on Application of Requirements of Framework 


After studying this lesson, you should be aMe to: 

1. Identify the repcninq acrouniant s responsibilities when engaged to provide ? > '’ond opinion 
therequirerr^* nt f ihe applicable financial reporting framework 

2. Identif|^e reporting language Ih^w^^^^p^opriate when issuing a written report on the 


1. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 915, Reports on 

Application of Requirements of an Applicable Financial Reporting Framework. The standard states that the 
auditor's objective, when engaged to Issue a written report or provide oral advice on the application 
of the requirements of an applicabie.financlal reporting framework to a specific transaction or on the 
type of report that may be issued on a specific entity's financial statements, is to appropriately address: 
(1) the acceptance of the engagement; (2) the planning and performance of the engagement; and (3) 
reporting on the specific transaction or type of report. 


Definitions'.'""' •' 

Hypothetical Transaction: A transaction or financial reporting issue that does not involve facts o( 
.clrGum5tancesofaspedficentlty.,v . 

Reporting Accountant An accountant, other than a continuing accountant, who prepares a written 
report or provides oral ad vice on the application of the requirements of an applicable financial . 

reporting framework to a specific transaction or on the type of report that maybe issued on a specific 
>erttity's financial statements. (A reporting accountant whp is also engaged to provide accounting . 
advice to a specific entity on a recurring basis is commonly referred to as an advisory accountant.) 

Specific Transaction: A completed or proposed transaction or group of related transactions or a 
financial reporting issue involving facts and drcumstances of a specific entity. 


n. Engagement Acceptance 

A. The reporting accountant should consider the folloyving: (1) the circumstances under which the 
written report or oral advice is requested; (2) the'purpose of the request; and (3) the intended use 
of the written report or oral advice. 

B. The reporting accountant should not accept any engagement involving a hypothetical transaction. 

C. If it is appropriate to accept an engagement Under this SAS, the reporting accountant should 
establish an understanding with the requesting party that: (1) management is responsible 
for the proper accounting treatment and should consult with the continuing accountant; 

(2) management acknowledges that the reporting accountant may need to consult with the 
continuing accountant and, if requested, that management will authorize the continuing 
accountant to respond to the reporting accountant's inquiries; and (3) management will notify 
those charged with governance and the continuing accountant about the engagement. 


A. The reporting accountant should: 

1. Obtain an understanding of the specific transactlon(s) or the conditions relevant to the type 
of report that may be issued; 

2. Review the requirements of the applicable financial reporting framework; 
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Reports on Application of Requirements of Framework 


3. Consult with other professionals or others, If appropriate; 

4. Consider existing relevant precedents or analogies; 

5. Request permission from management to consult with the continuing accountant and 
request that management authorize the continuing accountant to respond fully to the 
reporting accountant's inquiries; and 

6. Consult with the continuing accountant regarding the facts. 

B. Consulting with the Continuing Accountant—Tlie reporting accountant {who is engaged 
to issue a written report or provide oral advice on the application of the requirements of an 
applicable financial reporting framework to a specific transaction) should consult with the 
continuing accountant unless; 

1. The reporting accountant is engaged to provide recurring accounting and reporting advice 
and (a) does not believe that a second opinion is being requested; (b) has full access to 
management; and (c) believes that the relevant information has been obtained. 

2. The reporting accountant deems it unnecessary to consult with the continuing accountant, 
the reporting accountant should document the justification for not consulting. 

C. Continuing Accountant's Responses—The continuing accountant's responsibilities for 
responding to inquiries of the reporting accountant are the same as those of a predecessor 
auditor responding to an auditor's Inquiries. The continuing accountant may indicate whether the 
method of accounting recommended by the continuing accountant is disputed by management 
and convey the continuing accountant's conclusion on the application of the requirements of an 
applicable financial reporting framework. 

IV. Written Report 

A. The report should be addressed to the requesting party and include the following: 

1. A description of the engagement and reference to this SAS; 

2. Identification of the specific entity, a description of any specific transaction(s), and a 
statement about the source of information; 

3. A statement describing the application of the requirements of an applicable financial 
reporting framework {and country involved); 

4. A statement that management is responsible for the proper accounting treatment and they 

should consult with their continuing accountants; ^ ' 

5. A statement that any differences in the facts or circumstances may change the report; and 

6. A restriction that the report is intended solely-for the specified parties. {The restricted 
distribution of the report does not prevent distribution of the report to the continuing 
accountant.) 

B. The requirements associated with the written report may be useful when providing oral advice, 
too. 

V. Sample Written Report to the Requesting Party 


Introduction 

We have been engaged to report on the appropriate application of the requireiriehtSi^sleedypdhg-:: 
principles generally accepted in the United States of America to the specific transactlonsdescribed ; 
below.This repopCis being issued to ABC in evaluatingi||ounving policies 

for the describediiSpecific transaction. Our engagefnent has been conducted lnaccordanc«HWittemi 
Statement on Auditing Standards Reports on Appjicafiohbf Requirements of an AppllcablpiBnaneial 
Reporting Framework. 
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Forming Conclusions and Reporting 


Description of Transactions 

The fdtts circumstant es, iind as<;umpUon& relevant to the specific trunsaction pi^ vij o to us by the 
manciqonnent of ABC Company are as follows 

{Include text discussing the facts cncumstances, ana assumptions refevant to the spmtic transaction i 

Appropriate Accounting Pnnciples 

[Include text discussing accounting principles generally accepted in the {Jnited States orAtnenca and how 
they apply to thedesaibed transaction.) 

Concluding Comments 

The ultimate responsibility for the decision on the appropnate application of thp mquirementsof 
accounting prtnaples generally accepted in the United States of America foi an dLtual transaction 
re«t*‘ / ith I hp prpparers of financial ‘'tatements who should consult with their continuing accountant 
Oui concivsion on the appropriate app1icat^r^^^^^^tem<.nts of a«.countin j pi iiiLiplcs generally 
accepted in the United States of America transaction is ba-ed solely on 

the facts orovided lu us as previously desc^^^^^^^Hse farts and circumstances differ, our 
conclusion may change. ^ 

Restricted Use 


This lepori is intended solely for the infbrn^l^^^^^^^l^ed with governance and 
management of ABC Company and is not intend^ to be and should not be used by anyone othei 
than these specified parties. 
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F/S with Special Purpose 




Identify the four pe<:)ficbase$ of accounting associated with the term sipe^i 


Identify therepb 
financial statemert 
reporting ianguag 




Je/mmevvor/c. 

(brton 
Is in such 


L Relevant AlCPA Guidance —^The relevant AlCPA guidance Is provided by AU 800, Special 

Considerations—Audits of Financial Statements Prepared in Accordance With Special Purpose Frameworks. 
The standard states that the auditor's objectives are to (1)the acceptance of the engagement; (2) the 
planning and performance of that engagement; and (3) forming an opinion and reporting on the 
financial statements. 




Definition 

Special Purpose Framework: A financial reporting framework other than GAAP that is one of the 
following bases of accounting; (T) cash basis, (2) tax basis, (3) regulatory basis, or (4) contraetuaI basis,: 
or (5): other basis (that "uses a definite Set of logical, reasonable criteria that is applied to all material 
Items appearing in financial statements"); . _ 


II. Engagement Acceptance 

A. Acceptability of the Financial Reporting Framework— The auditor should obtain an 
understanding of (a) the purpose for which the financial statements are prepared; (b) the intended 
users; and (c) the steps taken by management to determine that the applicable financial reporting 
framework is acceptable in the circumstances. 

B. Preconditions for an Audit— The auditor should obtain the agreement of management that it 
understands its responsibility to include alt informative disclosures that are appropriate for the 
special purpose framework used, including (a) a description of the special purpose framework; 

(b) informative disclosures similar to those required by GAAP; (c) a description of any significant 
interpretations of the contract on which the special purpose financial statements are based, 
when applicable; and (d) additional disclosures beyond those specifically required that may be 
necessary to achieve fair presentation. 

III. Engagement Planning and Performance 

A. When the Engagement is Based on an Underlying Contact- The auditor should obtain an 
understanding of any significant interpretations of the contract that management made. 

B. An interpretation is significant when adoption of another reasonable interpretation would have 
produced a material difference. 

iV. Forming an Opinion and Reporting Considerations 

A. Description of the Applicable Financial Reporting Framework— The auditor should consider 
whether the financial statements are appropriately titled (should not use financial statement 
names that imply GAAP), include a summary of significant accounting policies, and adequately 
describe how the special purpose framework differs from GAAP.These differences do not have to 
be quantified, however. 

B. Fair Presentation—The auditor should determine whether informative disclosures are included 
similar to those required by GAAP, and whether additional disclosures are needed to achieve fair 
presentation. 
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Forming Conclusions and Reporting 


C. Auditor's Report “The report should describe the purpose for which the financial statements 
are prepared (if regulatory basis or corttractuai basis) or reference a note containing that 
information about the special purpose framework used. 

D. Alerting Readers in an Emphasis-of-Matter Paragraph— The auditor's report on special 
purpose financial statements should Include an emphasis-of-matter ("Basis of Accounting") 
paragraph that (1) indicates that the financial statements are prepared in accordance with the 
applicable special purpose framework; (2) refers to the note that describes that framework; and 
(3) states that the special purpose framework is a basis of accounting other than GAAP. (The only 
exception to such an alert Irw/oWes regulatory basis financial statements intended for general use for 
which no such alert is needed.) 

E. Restricting the Use of the Auditor's Report to the Intended Users— The auditor's report should 
also include an other-matter paragraph that restricts the use of the auditor's report to those 
within the entity, the parties to the contract/agreement, or the regulatory agencies to whom the 
entity is subject when the financial statements are prepared In accordance with either (1) a 
contractual basis of accounting; or (2) a regulatory basis of accounting. (The only exception to 
such a restriction involves regulatory basis financial statements intended for general use for wh ich no 
such restriction is needed. And iio such restriction applies to cash basis or tax basis.) 

F. Regulatory Basis Financial Statements intended for General Use —If the financial statements 
are prepared in accordance with a regulatory basis of accounting and are intended for general 
use, the auditor should not include the emphasis-of-matter or other-matter paragraphs. Instead, 
the auditor should express (1) an opinion as to whether the financial statements are prepared 

in accordance with GAAP (which they are not); and (2) an opinion in a separate paragraph as to 
whether the financial statements are prepared in accordance with the special purpose framework. 

G. Auditors Report Prescribed by Law or Regulation —if the prescribed specific layout, form, 
or wording of the auditor's report is not acceptable (or would cause the auditor to make an 
inappropriate statement), the auditor should either reword the prescribed form or attach 
separately an appropriately worded audit report. 



Question 

Which special purpose frameworks require a description of purpose for which such financial 
statements are prepared! 

Answer: 

Only regulatory basis (whether Intended for general use or no^^nd contractual basis. (Cash basis and 
tax basis do not!) 



Question 

Which special purpose frameworks require an emphasis-of-mafter paragraph alerting 
readers to the special purpose framework? ,, " 

Answer: 

Cash basis, tax basis, regulatory basis (if restricted), and contractual basis do. (Only regulatory basis 
ntended for general use does not require such an alert!) 




Which special purpose frameworks require an other-matter paragraph to restrict the 
distribution of the auditor's report to specified users? 


Answer: 

Only regulatory basis (if restricted) and contractual basis do. (Cash basis, tax basis, and regulatory basis 
intended for general use do not require such a restriction!) 
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F/S with Special Purpose Frameworks 


V. Sample Audit Report for Financial Statements Prepared on a Cash Basis 


Independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statements of ABC Partnership, which comprise the 
statement of assets and liabilities arising from cash transactions as of December 31,20X1, and the 
related statement of revenue collected and expenses paid for the year then ended, and the related 
notes to the financial statements. 

Managements Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements in 
accordance with the cash basis of accounting described In Note X; this includes determining that the 
cash basis of accounting is an acceptable basis for the presentation of the financial statements in the 
circumstances. Management is also responsible for the design, implementation, and maintenance of 
internal control relevant to the preparation and fair presentation of financial statements that are free 
from material misstatement, whethefdue to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America.Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, including 
the assessment of the risks of material misstatement of the financial statements, whether due to 
: fraud or error. In making those risk assessments, the auditor considers internal control relevant to 
i the partnership's preparation and fair presentation of the financial statements in order to design 
audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an 
opinion on the effectiveness of the partnership's internal control. Accordingly, we express no such 
opinion. An audit also includes evaluating the appropriateness of accounting policies used and the 
reasonableness of significant accounting estimates made by management, as well as evaluating the 
overall presentation of the financial statements. 

We believe that the audit evidence we have obtained is sufficl^t and appropriate to provide a basis 
for our audit opinion. . 

Opinion 

In our opinion, the financial statements referred to above present fairly, in all material respects, the 
assets and liabilities arising from cash transactions of ABC Partnership as of December 31,20X1, and its 
revenue collected and expenses paid during the year tbed ended in accordance with the cash basis of 
accounting described in Note X. T 

Basts of Accounting 

We draw attention to Note X of the financial statements, which describes the basis of accounting. The 
financial statements are prepared on the cash basis of accounting, which is a basis of accounting other 
than accounting principles generally accepted in the United States of America. Our opinion is not 
modified with respect to this matter. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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Audits of Single F/S and Specific 
Elements, Accounts, or Items 


After studying this te|son, you should bo able to: 

1. Identify the auditc|‘ s responsibilities when engaged to report on a single financial sta 
specific element c| a financial statement 

2. Identify the reporfng language that would be appropnate when Issuing an audit rep ii i 

financial statemeitt or specific element of a financial statement 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 805, Special 

Cons/c/eraf/ons— Audits of Single Financial Statements and Specific Elements, Accounts, or Items of a 
FinancialStatement.The standard states that the auditor's objective is to appropriately address the 
special considerations that are relevant to (1) the acceptance of the engagement; (2) the planning and 
performance of the engagement; and (3) reporting on the single financial statement or the specific 
element. 

n. Engagement Acceptance 

A. Application of GAAS— If not engaged to audit the complete set of financial statements, the 
auditor should determine whether the audit of a single financial statement or a specific element of 
those financial statements in accordance with GAAS is practicable. 

B. Acceptability of the Financial Reporting Framework— The auditor should obtain an 
understanding of (a) the purpose for which the single financial statement or specific element of 
a financial statement is prepared; (b) the intended users; and (c) the steps taken by management 
to determine that the application of the financial reporting framework is acceptable and that 
disclosure is adequate. 

III. Engagement Planning and Performance 

A. If the Specific Element is Based on Stockholders' Equity— The auditor should obtain sufficient 
appropriate evidence to enable the auditor to express an opinion about financial position. (This 
effectively means that the auditor should have audited the whole balance sheet in order to report 
on an element based on stockholders'equity.) 

B. If the Specific Element is Based upon the Entity's Net Income or the Equivalent— The auditor 
should obtain sufficient appropriate evidence to enable the auditor to express an opinion about 
both financial position and results of operations. (This effectively means that the auditor should 
have audited the complete set of financial statements In order to report on an element based on 
net income.) 

C. Considerations when Planning and Performing the Audit —Written representations 
from management about the complete set of financial statements would be replaced by 
representations about the single financial statement or the specific element in accordance with 
the applicable financial reporting framework. 

IV. Forming an Opinion and Reporting Considerations 

A. Reporting on the Entity's Complete Set of Financial Statements and a Single Financial 
Statement or a Specific Element of Those Financial Statements: 

1. If the auditor is engaged to audit a single financial statement or a specific element of a 

financial statement in connection with an audit of the complete set of financial statements— 
The auditor should (1) issue a separate report and express a separate opinion for each 
engagement, and (2) Indicate in the report on a specific element of a financial statement the 
date of the auditor's report on the complete set of financial statements and the nature of that 
opinion under an appropriate heading. 
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2. An audited single financial statement or an audited specific element of a financial statement 
may normally be published along with the entity's audited complete set of financial 
statements if the single financial statement or specific element is sufficiently differentiated 
from the complete set of financial statements. 

3. If the presentation does not sufficiently differentiate the single financial statement or specific 
element from the audited financial statements—^The auditor should ask management to 
address the situation; and the auditor should not release the auditor's report until satisfied 
with the resolution. 

B. Modified Opinion, Emphasis-of-Matter Paragraph, or Other-Matter Paragraph in the 
Auditor's Report on the Entity's Financial Statements: 

1. If the modified opinion on the set of financial statements Is relevant to the audit of the 
specific element (Le., the modification is material and pervasive with respect to the 
specific element)— The auditor should (a) express an adverse opinion on the specific element 
when the modification applicable to the set of financial statements is a result of a material 
misstatement in the financial statements; or (b) disclaim an opinion on the specific element 
when the modification applicable to the set of financial statements is a result of a scope 
limitation. (Note: Otherwise-that would be equivalent to expressing a piecemeal opinion, 
which is prohibited.) 

2. If the modified opinion on the set of financial statements is relevant to the audit of the 
specific element and the auditor still considers it appropriate to express an unmodified 
opinion on that specific element —The auditor should only do that if (a) that opinion Is 
expressed in a report that does not accompany the report containing the adverse opinion 

or disclaimer of opinion, and (b) the specific element does not constitute a major portion 
of the entity's complete set of financial statements or the specific element is not based on 
stockholders'equity or net Income or equivalent. 

3. A single statement constitutes a major portion of a complete set of financial statements, so 
the auditor should not express an unmodified opinion on the single financial statements 
when an adverse opinion or disclaimer of opinion is expressed on the complete set of 
financials. 

4. If the report on the complete set of financial statements includes an emphasis-of- 
matter or other-matter paragraph relevant to the single financial statement or the 
specific element —The auditor should include a similar emphasis-of-matter or other-matter 
paragraph in the report on the single financial statement pr specific element. 

C. Reporting on an Incomplete Presentation (that is otherwise in Accordance with GAAP)—^The 

auditor should include an emphasis-of-matter paragraph in the auditor's report that (1) states the 
purpose for which the presentation Is prepared and refers to a note in the financial statements 
that describes the basis of presentation; and (2) indicates that the presentation is not intended to 
be a complete presentation. 

V. Sample Report on a Single Financial Statement (Based one General Purpose Framework) 
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independent Auditor's Report 


{Appropriate Addressee) , . , ,, , , 

We have audited the accompanying balance sheetdf ABC Company as of December 31,20X1, and the 
related notes (the financial statement). 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of the financial staternent 
in accordance with accounting principles generally accepted In the United States of America; this 
iricludes the design, implementation, and maintenance of Interna! control relevant to the preparation 
and fair presentation of the financial staternent that is free from material misstatement, whether due 
to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on the financial statement based on our audit We 
conducted our audit in accordance With auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statement is free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statement. The procedures selected depend on the auditor's judgment, including the ; 
assessment of the risks of material misstatement of the financial statement, whether due to fraud or 
error. In making those risk assessments, the auditor considers internal control relevant to the entity's 
preparation and fair presentation of the financial statement in order to design audit procedures , 
that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control. Accordingly, we express no such opinion. An audit also 
includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as wejl as evaluating the overall presentation 
of the financial statement. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis. 
for our audit opinion. 

Opinion ' 

In our opinion, the financial statement referred to a^ove presents fairly, in all material respects, the 
financial position of ABC Company as of December31^0X1, in accordance with accounting principles 
generally accepted in the United States of AmeriC^. ' 

(Auditor's signature) , . - ' 

(Auditor's city and state) . ^ 

(Date of the auditor's report) 
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equirements in an F/S Audit 


After stud^ng this ^ossoii/you should be able to: 

1. Identify the audi 'siesj ■ i! iliUes >i( tiengjiiciJ ittreportonar entity'scompllancewith 
contractual or re I latory^ neinehi in c onnectioii ^ith an audit of the entity's financial 

statements. ■ 

2. identify the reporting langu< cje that would be appropriate when issuing a report on compliance 
with contractual or regulator y requirements eithe'in a separate report on compliance or a 
combined repo t on the aud led financial statement and on compliance issues 


I. Relevant AiCPA Guidance-— The relevant AlCPA guidance is provided by AU 806, Reporting on 
Compliance with Aspects of Contractual Agreements or Regulatory Requirements in Connection with 
Audited Financial Statements. The standard states that the auditor's objective, when requested to 
report on an entity's compliance with aspects of contractual agreements or regulatory requirements in 
connection with the audit of financial statements, is to report appropriately on such matters. 

ii. Reports on Compliance with Aspects of Contractual Agreements or Regulatory Requirements 

A. The auditor should include a statement that nothing came to the auditor's attention to cause the 
auditor to believe that the entity failed to comply with the specified aspects of the contractual 
agreements or regulatory requirements only if: (1) the auditor did not identify any such 
noncompliance; (2) the auditor expressed an unmodified or qualified opinion on the financial 
statements involved; and (3) the covenants or regulatory requirements related to accounting 
matters that have been subjected to procedures applied In the audit. 

B. When Instances of Noncompiiance have been Identified— The auditor's report on compliance 
should describe that noncompiiance. Note: If the entity has obtained a waiver for such 
noncompliance, the auditor may include a statement that a waiver has been obtained; but, all 
instances of noncompiiance must be described in the report, including those for which a waiver 
has been obtained. 

C When the Auditor has Issued an Adverse Opinion or Disclaimed an Opinion— The auditor 
should issue a report on compliance only when instances of noncompiiance were identified. 

D. The report on compliance should be In writing and shoujckbe presented either as a separate 
report or may be combined with the auditor's report on the financial statements. 

E. include a paragraph conveying an appropriate alert^at restricts the distribution of the report on 
compliance issues to the specified users. 

III. A Separate Report on Compliance with Aspects of Contractual Agreements When No Instances 
of Noncompiiance Are Identified 
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Independent Auditor's Report 

{Appropriate Addressee) 

We have audited, in accordance with auditing standards genpraily accepted in the United States 
of America, the financiaj statements of XYZ Company, which comprise the balance sheet as of 
December 31,20X2, and the related statements of income changes in stockholders'equity, and cash 
flows for the year then ended, and the related notes to the financial statemerits, and have issued our 
report thereon dated February 16,20X3. 

In connection with our audit, nothing came to our attention that caused us to believe that XYZ 
Company failed to comply with the terms, covenants, provisions, or conditions of sections XX to YY, 
inclusive, of the Indenture dated July 21,20X0, with ABC Bank, insofar as they relate to accounting . 
matters. However, our audit was not directed primarily toward obtaining knowledge of such 
noncompliance. Accordingly, had we performed additional procedures, other matters may have 
come to our attention regarding the Company's noncompliance with the above-referenced terms, 
covenants, provisions, or conditions of the Indenture, insofar as they relate to accounting matters. 

This report is intended solely for the jnformation and use of the board of directors and managernentof 
XYZ Company and ABC Bank and is not intended to be and should not be used by anyone other than 
these specified parties. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 


IV. A Separate Report on Compliance with Aspects of Contractual Agreements When Instances of 
Noncompliance Are Identified 


Independent Auditor's Report 

(Appropriate Addressee) 

We have audited, in accordance with auditing standards generally^accepted in the United States 
of America, the financial statements of XYZ Company, which.Gomprise the balance sheet as of 
December 31,20X2, and the related statements of income, changes in stockholders' equity, and cash 
flows for the year then ended, and the related notes to the financial statements, and have issued our 
report thereon dated March 5,20X3. . . ' 

In connection with our audit, we noted that XYZ Company failed to comply with the Working Capital 
provision of section XX of the Loan Agreement dated Mardi 1,20X2,with ABC Bank. Our audit was not 
directed primarily toward obtaining knowledge as to Whether XYZ Company failed to comply with 
the terms, covenants, provisions, or conditions of sectibhs XXtbYY, inclusive, of the Loan Agreement, 
insofar as they relate to accounting matters. Accordingly, had we performed additional procedures, other 
matters may have come to our attention regarding noncompiiance with the above-referenced terms^ 
covenahts, provisions, or conditions of the Loan Agreement, insofar as they relate to accounting matters. 

This report is intended solely for the information and use of the board of directors and management pi 
XYZ Company and ABC Bank and Is not intended to be and should not be used by anyone other than 
these specified parties. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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V. A Combined Report on Audited Financial Statements and Compliance with Aspects of 
Contractual Agreements When No Instances of Noncompliance Are Identified 



Independent Auditor's Report 


We have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of income, changes in 
stockholders'equity, and cash flows for the year then ended, and the related notes to the financial 
statements; 


Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of interna! control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 


Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America.Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 


An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, including the 
assessment of the risks of material misstatement of the financial statements, whether due to fraud or 
error. In making those risk assessments, the auditor considers internal control relevant to the entity's 
preparation and fair presentation of the financial statements In order to design audit procedures 
that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's internal control. Accordingly, we express no such opinion. An audit also 
includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as well as evaluating the overall presentation 
ofthe financial statements. 


We believe that the audit evidence we have obtained is.sufficient and appropriate to provide a basis 
for our audit opinion. v ^ ' 


Opinion 

In our opinion, the financial statements referred to above^present fairly, in all materia! respects, the 
financial position of ABC Company as of December 31,2QXT, arid the results of its operations and its 
cash flows for the year then ended in accordance witffaccounting principles generally accepted in the 
United States of America. 


Other Matter 


In connection with our audit, nothing came to our attention that caused us to believe that ABC 
Company failed to comply with the terms, covenants, provisions, or conditions of sections XX 
to YY, ineiusive, ofthe Indenture dated July 21,20X0 with XYZ Bank, insofar as they relate to 
accounting matters. However, our audit was not directed primarily toward obtaining knowledge 
of such noncompliance. Accordingly^ haci we performed additional procedures, other matters may 
have come to our attention regarding the Company's noncompliance with the above-referenced 
terms, covenants, provisions, or conditions ofthe Indenture, insofar as they relate to accounting 
matters. 
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Restricted Use Relating to the Other Matter ; - 

The communication related to compliance with ti^afibrernerttioned Jodenture described in the 
Other Matter paragraph is Intended solely for thelafontiradon and use of of directors and 

management of ABC Company and XYZ Bank and Is not intended to be and should not be used by 
:anyone other than thesespecified parties. 

(Auditor's signature) !. . ..... 

(Auditor'scityandsta^-V. 

(Dateoftheaudiiar^repot^:'/ ^ 





After studying this iesson, you should beaWe to: 

I t identify the user auditor's responsibilities when auditing .a:user ent/fy that some 

2k Understand a service auditor's report may have to the user auditor's report on 


I. Relevant AlCPA Guidance—The relevant AlCPA guidance is provided by AD 402, Audit Considerations 
Relating to an Entity Using a Service Organization. The standard states that the user auditor's objectives, 
when the user entity uses the services of a service organization, are to; (1) obtain an understanding 
of the nature and significance of the services provided and theireffect on the user entity's internal 
control relevant to the audit sufficient to assess the risks of material misstatement, and (2) design and 
perform audit procedures that are responsive to those risks. 


Definitions 

Complementary User Entity Controls: Controls that management of the service organization assumes, 
in the design of its service, will be Implemented by user entities, and which, If necessary to achieve 
the control objectives stated in management's description of the service organization's system, are. . . 
identified as such In that description. ' r' 

SerwceAud/fon A practitioner who reports on controls at a service organization 

5erv/ce Orgon/zc7f/on: An organization or segment of an organization that provides services to user 
entities that are relevant to those user entities' internal control over financial reporting. 

Subservice Organization: A service organization used by another service organization to perform some | 
of the services provided to user entities that are relevant to hose user entities' interna) control over I 
financial reporting. (This SAS also applies to subservice organizations.) , | 

; Type r/?epoft:Reportonmanagement'sdescriptlonofaserviceorganization'ssystemandthe 

suitability of the design of controls. 

lypeiReporf: Report on management's description ofaserviceor^anization's system and the - 

suitability of the design and operating effectiveness, of <ontrols. 

User Aud/for: An auditor who audits and reports on.the financial statements of a user entity. 

User Entity, An entity that uses a service organization and whosefinancial statements are being audited; 


11. User Auditor Responsibilities 

A. Obtain an Understanding of the Services Provided by a Service Organization, including 
internal Controls 

1. The services of a service organization are relevant to the audit of a user entity when those 
services (and the controls over those services) affect the user entity's information system 
related to financial reporting and safeguarding assets. 

2. The user auditor should evaluate the design and implementation of relevant controls at the 
user entity related to the service organization's services. 
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3. The user auditor should determine whether a sufficient understanding of the nature and 
significance of the service organization's services and their effect on the user entity's internal 
control relevant to the audit have been obtained to assess the risks of material misstatement. 

4. If the user auditor is unable to obtain a sufficient understanding from the user entity— 
the user auditor should obtain that understanding by: 

a. Obtaining and reading the service auditor's Type 1 or Type 2 report; 

b. Contacting the service organization {through the user entity) to obtain specific 
information, or visiting the service organization and performing necessary procedures 
about relevant controls; or 

c. Using another auditor to perform procedures to provide the necessary information about 
controls at the service organization. 

5. Using a Type 1 or Type 2 report to support the user auditor's understanding 

a. The user auditor should be satisfied about (1) the service auditor's professional 
competence and Independence and (2) the standards that the service auditor followed in 
issuing the report. 

b. The user auditor should (1) evaluate whether the report provides sufficient appropriate 
evidence for understanding the user entity's relevant internal controls and (2) determine 
whether any complementary user entity controls identified by the service organization are 
relevant In assessing the risks of material misstatement. 

B. Responding to the Assessed Risks of Material Misstatement 

1. Evidence at the user entity— The user auditor should determine whether sufficient 
appropriate audit evidence is available at the user entity; and, if not, perform further audit 
procedures at the service organization. 

2. Tests of controls— When the user auditor's risk assessment includes an expectation that 
controls at the service organization are operating effectively, the user auditor should 
obtain evidence about such operating effectiveness by either obtaining a Type 2 report or 
performing appropriate tests of controls at the service organization (or using another auditor 
to perform those tests of controls). 

3. A user entity may outsource some or all of its finance function to a service 
organization— In that case, a significant portion of the audit evidence resides at the service 
organization. Necessary substantive procedures rr^ be performed at the service organization 
by the user auditor or by the service auditor on th^ser auditor's behalf. The user auditor is 
still responsible for obtaining sufficient appropriate audit evidence. 

C. Inquiry about Fraud, Noncompliance, and Uficorrected Misstatements—The user auditor 
should inquire of the user entity's management as to whether they are aware of any fraud, 
noncompliance with laws and regulations, or uncorrected misstatements at the service 
organization affecting the financial statements of the user entity. 

III. Reporting Issues to the User Auditor . 

A. Modified Opinion 

1. Scope limitation— If the user auditor is unable to obtain sufficient appropriate audit 
evidence about the services provided by the service organization relevant to the user entity's 
financial statements, the user auditor should modify the opinion for a scope limitation. 

2. Reference to service auditor— The user auditor may refer to the service auditor in the 
user auditor's report containing a modified opinion if that reference would be relevant to 
understanding the user auditor's modification. The user auditor should indicate that such 
reference does not change the user auditor's responsibility for that opinion. 

B. Unmodified Opinion—The user auditor should not refer to the service auditor in the user 
auditor's report containing an unmodified opinion. The user auditor is responsible for the opinion 
expressed, and no division of responsibility is permitted. 
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ing this lesson, you should be able to 

Under 3nd the service auditor s leiiuirei ■ 
to repc -t(pn internal control over fituinci. I 

Identif thenatureofthetworinh lonltypt so 

maybi engaged to issue 


PA Attestation Standards en engaged 
service organization 

n internal control that a st ice auditor 


I. Relevant AlCPA Guidance 

The relevant AlCPA guidance applicable to the service auditor Is provided by AT-C 320, Reporting on an 
Examination of Controls at a Service Organization. 

II. Distinction Between the Service Auditor and the User Auditor 




Definitions 

Service Auditor: Practitioner who reports on controls at a.$ervice organization, 

User Auditor. An auditor who audits and reports on the financial statements of a user entity, (In other 
words, the auditor of an entity that has outsourced the processing of Its transactions to the service , 
organization for whom such processing may he more efficient; the user auditbr must consideFTele 
Interna) controls of the service organization in auditing the financial statements of such a user ehtityjf 


III. Applicability 

A. The Attestation Standards Apply to Internal Control Reporting by the Service Auditor— 

The service auditor may be engaged to issue either of two types of reports on internal control 
applicable to a service organization. 

1. On the adequacy of the design of internal control (Called a "Type 1 engagement" by AlCPA 
Professional Standards)—Whether the control policies and procedures are suitably designed 
and placed in operation. 

2. On the operating effectiveness of internal control (based on tests of controls) (called 
a "Type 2 engagement" by AlCPA Professional Standards)rrWhether the policies and 
procedures are suitably designed and working effectively to provide reasonable assurance of 
achieving the stated control objectives. 

B. Examples of Such Services—Bank trust departments, mortgage banks that service mortgages 
for others, IT centers (e.g., processing checks for financial institutions or handling the details of 
subscriptions for magazine publishers). 

C. Management of the service organization is required to provide the service auditor with a written 
assertion (1) about the fairness of the presentation of the description of the system and (2) about 
the suitability of the design; and, in a Type2 engagement, management is also required to 
provide a written assertion (3) about the operating effectiveness of the controls. Those assertions 
should either accompany the service auditor's report or be included in the service organization's 
description of the system of internal control. 

IV. Responsibilities of Service Auditors (Governed by SSAEs)—Must be independent of service 
organization, but not necessarily Independent of all user entities. 

A. Procedures 

1. inquiry—of service organization management and other personnel. 

2. Inspection—of documentation (flowcharts, narrative memoranda, or questionnaires). 

3. Observation—of internal control activities. 
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4. Obtainment of management's written representations as deemed appropriate. 

5. Performance of test of control—lf reporting on the operating effectiveness of internal control, 
the service auditor must perform appropriate tests of controls. 

B. Reporting on the Adequacy of the Design of Internal Control (i.e., reporting on the internal 
control policies and procedures placed in operation, which are also known as a "Type 1" 
engagement)—the service auditor's report ordinarily consists of the following sections: 

1 . Scope— Identify the nature of the engagement and the specific date involved. 

2. Service organization's responsibilities 

3. Service auditor's responsibilities —Reference the attestation standards established by the 
AiCPA and describe an examination; also, disclaim an opinion on operating effectiveness 

4. Inherent limitations of internal control 

5. Opinion— (1) that the description fairly presents the system that was designed and 
implemented as of the specific date; and (2) that the controls related to the stated control 
objectives were suitably designed to provide reasonable assurance that the control objectives 
would be achieved if the controls operated effectively as of the specific date. 

6. Restricted use— Distribution should be restricted to the service organization, user entities, 
and the user entities' Independent auditors. 

C. Reporting on the operating effectiveness of internal control (i.e., reporting on the policies 
and procedures placed in operation and on their operating effectiveness, which are also known 
as a "Type 2" engagement)—the service auditor's report ordinarily consists of the following 
sections: 

1. Scope— Identify the nature of the engagement and the period involved. 

2. Service organization's responsibiiities 

3. Service auditor's responsibilities— Reference the attestation standards established by the 
AICPA and describe an examination. 

4. Inherent limitations of internal control 

5. Opinion— (1) that the description fairly presents the system that was designed and 
implemented throughout the period; (2) that the controls related to the stated control 
objectives were suitably designed to provide reasonable assurance that the control objectives 
would be achieved if the controls operated effectively throughout the period; and (3) that the 
controls tested operated effectively throughout the period. 

6. Description of tests of controls— Reference the pages of the service auditor's repor t_ 

identifying the specific controls tested and the nature, timing, and 
results of those tests. 

7. Restricted use— Distribution should be restricted to.the service 
organization, user entities, and the user entItlesMndepend.ent auditors. 

V. Service Organization Control Reports —The AICPA has developed a 
"menu" of assurance-related service opportunities for CPAs under the 
heading of Service Organization Control Reports (or SOC Reports): 


A variety of resotfcH including an "SOC Toolkif is avatlable.pn the AiCPA's website at: 
http://www/.aicp8prg/interestareas/frc/assuranceadvisoryservices/pages/soctbo,lkit_fiirms.aspx 

SOC 1 Report: 

"To give the auditor of A.User entity's fin.mc lal statements information about Oi-Hiols at a service 
organization relevant to a user entity's internal control over finaneia! reporting. AType 2 

SOC 1 report in<^^S|^Jiledde^aiptiiM: of tests of controls performed by riie CPAand results of 
the tests" [Such a report must be restricted to specified users.] 


Note 

Management specifies 
tSe control objectives to 
be tested—Shouia covefg 
amportirigperipdofdt'^':. 

least six months. 
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Note 

Thebcivicuauditor! rcportunderAT-^SIOIsanSOC I repoit 
SOC 2 Report: 

"To give management of a service orgapization, user entities and others^^eport about controls 
at a service organization releva|stfe%e security, availability or processip^integrity of the service 
organization's system, or the and privacy of the data pro^^ed by that system. A Type 

2 SOC 2 report includes a detc^^^^^P^*^” of tests of controls perf6^|d by the CPA and results of 
thetests."[Suchareportmust§fi|^id:^tospficifiedusers.] - 

SOC 3 Report: 

"To give users and interes^d paltjes a-report about controls at the service organization related to 
security, availabilityJJ^Cels^l:^ inlegfl^i confidentiality or privacy. SOC 3 reports area^hort-form 
I'rMfi* If.'- 'ription of tests of controls and results)-iiiii in ly lu iiM'cl in a s>'V. j 
marketing efforts." ij|(|5s tKe only SOC report that is appropriate for"general use"; the others must be 
restricted to specifi^users.] 




Comfort Letter; 



i«son,youshoui€1mbleto; 

com/bf^^^s provided by accountable under\wnters and other 
l^^^.connec^^^th an entity's stock issua]|^. 

II^Ertore of i^Mrt letters and the natdrei^he assurance specifically 


Understanc 
fir^ancial Im 


Understani 

provided accountapl^^iitors, 


I, Relevant AlCPA Guidance—The relevant AlCPA guidance Is provided by AU 920: Letters for 
Underwriters and Certain Other Requesting Parties.The standard states that the auditor's objectives, 
when engaged to issue a letter to a requesting party In connection with a nonissuer entity's financial 
statements included in a securities offering, are to appropriately address: (1) the acceptance of the 
engagement and the scope of services, and (2) Issue a letter with the appropriate form and content. 

II. Purpose— Section 11 of the Securities Act of 1933 (the Act) provides for liability to underwritersand 
certain others (such as a broker-dealer or a financial intermediary) when there is a material omission or 
misstatement to a registration statement. 

A. A comfort letter from the entity's auditor may help underwriters or others having a statutory due 
diligence defense under Section 11 of the Act to establish a reasonable investigation (i.e., due 
diligence), 

B. Comfort letters are not required and are not filed with the SEC. 

C. The scope is specified in the underwriting agreement (between the entity and the underwriters 
or others); a copy of the agreement should be given to the auditor. The auditor should obtain 
from the requesting party either (1) a written opinion from legal counsel that the requesting party 
has a statutory due diligence defense under Section 11 of the 1933 Act, or (2) an appropriate 
representation letter that meets certain technical requirements. (Without that, the auditor should 
not provide negative assurance on the financial statements or on any of the requested matters.) 

D. The auditor should meet with the underwriters (or other requesting parties) to establish 
their specific needs and give them a draft of the expected comfort letter in advance to avoid 
misunderstandings. 

E. The auditor should avoid implying that the procedures performed were sufficient for the 
underwriter's (or other parties') purposes, since that is adegal determination. 

HI. A Typical Comfort Letter— Usually consists of the following: 

A. An introductory paragraph that identifies the particular registration statement and the audited 
financial statements and schedules with which the auditor Is associated 

B. A statement as to the auditor's independences 

C. Positive Expression of Opinion— Whether the audited financial statements and schedules 
comply as to form with the accounting requirements of the Act and the SEC (if a review under 
GAAS has been performed); If a review of the Interim Information has not been performed, the 
auditor is limited to reporting the procedures performed along with the findings 

D. Negative Assurance—Whether the unaudited condensed Interim financial information complies 
as to form with the requirements of the Act and the SEC 

E. Negative Assurance—Whether any material modifications should be made to the unaudited 
condensed consolidated financial statements 

F. Negative Assurance—Whether there has been any change during a specified period in capital 
stock, increase in long-term debt, or any decrease in other specified financial statement items 

G. A concluding paragraph that limits the distribution of the comfort letter to specified parties for 
the purposes stated 
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[V. Other Reporting Considerations 

A. Dating of the Letter—A comfort letter is usually dated on or shortly before the effective date of 
the registration; the letter should state that the procedures identified in the letter did not cover 
the period after the cut-off date (to which the procedures apply) to the date of the letter. 

B. Addressee—A comfort letter should be addressed only to the entity, named underwriters, broker- 
dealer, or the financial intermediary related to the securities. 

C. Comment on the Previously Audited Financial Statements Referred to in the Registration 
Statement 

1 . Give positive assurance (opinion) as to whether the audited financial statements comply 
with the form and content required by the SEC. 

2. Use the following language:"lnouropinion (include thephrase'except as disclosed in the 
registration statement,' if applicable) the consolidated financial statements and financial 
statement schedules audited by us and Included in the registration statement comply as to 
form in all material respects with the applicable accounting requirements of the 1933 Act and 
the related rules and regulations adopted by the SEC." 

D. Commenting on the Unaudited.Financial Statements, Condensed Interim Financial 
Information, or Capsule Financial Information —^The auditor should obtain an understanding of 
internal control over financial reporting. 

1. Unaudited financial statements and schedules and unaudited condensed interim 
financial information— The auditor may express negative assurance that interim information 
complies as to form with SEC requirements, if the auditor has performed a review of the interim 
financial information, (if a review of the interim financial information has not been performed, 
the auditor is limited to reporting the procedures performed and the findings.) 

2, Capsule financial Information— This term refers to unaudited summarized interim information 
in narrative or tabular form. The auditor Is permitted to express negative assurance on capsule 
financial information if (a) the auditor has appropriate knowledge of the entity's financial 
reporting practices; and (b) the auditor conducted an audit of the annual financial statements 
Involved (or conducted a review of the interim financial information involved). Otherwise, the 
auditor is limited to reporting the procedures performed along with the findings. 

E. Commenting on Financial Forecasts; Subsequent Changes; or Tables, Statistics, and Other 
Financial Information 

1. Forecasts— The comfort letter should not provide negative assurance on the results of any 
procedures performed with respect to financial forecasfs. 

2. Subsequent changes —Comments usually relate to any changes in capita! stock, increase in 
long-term debt, or decreases in other specified financial statement items (subsequent to the 
latest financial statements included in the registration statement). 

3. The comfort letter may express negative assurance regarding "subsequent changes" within 
135 days of the most recent period for which an auditor review was performed. The 
procedures usually are limited to reading the rninlites and making inquiries of management 
(and obtaining the appropriate written representations). (After 135 days from the most 
recent period for which the auditor has performed an audit or review, the auditor is limited to 
reporting the procedures performed along with the findings.) 

4. Tables, statistics, and other financial information —For the auditor to comment on tables, 
statistics, and other financial information in the comfort letter, there are several requirements: 
(a) the auditor must have conducted an audit of the entity's financial statements for a period 
including (or immediately preceding) the unaudited period (or have completed an audit 

for a later period); (b) the auditor must have obtained an understanding of the entity's 
internal control over financial reporting; (c) the information must be expressed in dollars (or 
percentages based on dollars); and (d) the information must be derived from the accounting 
records subject to the entity's internal control over financial reporting. The auditor's 
comments should clearly identify the specific information Involved, and report the procedures 
performed and the findings. 
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F. A comfort letter should state that the auditor make no representation involving legal 
interpretations. 



Typical Comfort Letter for a 1933 Act Offering 


[Addressee] 


Dear Ladies and Gentlemen 


We have audited the consolidated financial statements of the Nonissuer Company, Inc. (the company) 
and subsidiaries, which comprise the consolidated balance sheets as of December 31,20X5 and 20X4, 
and the related consolidated statements of income, changes in stockholders' equity, and cash flows 
for each of the years in the three-year period ended December 31,20X5, and the related notes to the 
consolidated financial statements, ail'included In The Issuer Company's (the registrant) registration 
statement (no. 33-00000) on Form S-1 filed by the registrant under the Securities Act of 1933 (the 
Act); our report with respect theretoJs also included in that registration statement.The registration 
statement, as amended on June 28^20X6, is herein referred to as the registration statement. 


In connection with the registration statement— 

1. We are independent certified public accountants with respect to the company within the meaning 
of the 1933 Act and the applicable rules and regulations thereunder adopted by the SEC. 

2. in our opinion [include the phrase "except as disclosed in the registration statement" if applicable], 
the consolidated financial statements audited by us and Included in the registration statement comply 
as to form in all material respects with the applicable accounting requirements of the Act and the 
related rules and regulations adopted by the SEC. 

3. We have not audited any financial statements of the company as of any date or for any period 
subsequent to December 31,20X5; although, we have conducted an audit for the year ended 
December 31,20X5, the purpose (and, therefore, the scope) of the audit was to enable us to express 
our opinion on the consolidated financial statements as of December 31,20X5, and for the year then . 
ended, but not on the financial statements for any interim period within that year. Therefore, we are 
unable to and do not express any opinion on the unaudited condensed consolidated balance sheet 

as of March 31,20X6, and the unaudited condensed consolidated statements of income, stockholders' 
equity, and cash flows for the three-month periods ended March 31,20X6 and 20X5, included in the 
registration statement, or on the financial position, results of operations, or cash flows as of any date or 
for any period subsequent to December 31,20X5' 

4. For purposes of this letter we have read the 20X6 minutes of meetings of the stockholders, the board 
of directors, and [include other appropriate committees,Jf -ahy] of the company and its subsidiaries 

as set forth in the minute books at June 23,20X6, officials of the company having advised us that the 
minutes of all such meetings through that date w'ere ^'forth therein and having discussed with us 
the unapproved minutes of meetings held on [dafes]; we have carried out other procedures to June 23, 
20X6, as follows (our work did not extend to the period from June 24,20X6 to June 28,20X6, inclusive); 

a.Withrespecttothethree-monthperiodsendedMarch31,20X6and20X5,wehave— 

i. Performed the procedures specified for a review In accordance with auditing standards generally 
accepted in the United States of America applicable to reviews of interim financial information, on the 
unaudited condensed consolidated balance sheet as of March 31,20X6, and the unaudited condensed 
consolidated statements of income, stockholders'equity, and cash flows for the three-month periods 
ended March 31,20X6 and 20X5, included in the registration statement. 

ii. Inquired of certain officials of the company who have responsibility for financial and accounting 
matters whether the unaudited condensed consolidated financial statements referred to In a(i) comply 
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as to fprm in all rnat^^ the applicable accpunting Tequirements of the Act and the 

related rules and regulations adopted by the SEC 

b. With respect to the period from Aprin, 20X6 to May 31,20X6, we have— 

i; Read the unaudited consolidated financial Information of the company and subsidiaries for April 
and May of both 20X5 and 20X6 furnished to us by the company, officials of the company having 
advised us that no financial statements as of any date or for any period subsequent to May 31,20X6, 
were available, (if applicable: The financial information for April and May of both 20X5 and 20X6 is 
incomplete in that it omits the statements ofcash flows and other disclosures.) 

li. Inquired of certain oifidals of the company who have responsibility for financial and accounting 
rnatters whether the unaudited consolidated financial information referred to in b{{) is stated on a 
basis substantially consistent with that of the audited consolidated financial statements included in 
the registration statement. 

The foregoing procedures do not constitute an audit conducted in accordance with generally 
accepted auditing standards. Also, they would not necessarily reveal matters of significance with 
respect to the comments in the following paragraph. Accordingly, we make no representations 
regarding the sufficiency of the foregoing procedures for your purposes. 

5. Nothing came to our attention as a result of the foregoing procedures, however, that caused us to 
believe that— 

a. 


i. Any material modifications should be made to the unaudited condensed consolidated financial 
statements described in 4a(i), included in the registration statement, for them to be in conformity with 
generally accepted accounting principles. 

ii. The unaudited condensed consolidated financial statements described in 4a{i) do not comply as to 
form in all material respects with the applicable accounting requirements of the Act and the related 
rules and regulations adopted by the SEC 

b. 


i. At May 31,20X6, there was any change in the capital stock, increase in long-term debt, or decrease 
in consolidated net current assets or stockholders'equity of thejionsolidated companies as compared 
with amounts shown in the March 31,200X6 unaudited condensed consolidated balance sheet 
included In the registration statement, or 

il. for the period from April 1,20X6 to May 31,20X6, there were any decreases, as compared to the 
corresponding period in the preceding year, in consolidated net sales or in income from continuing 
operations or of net income, except in all Instances for changes,increases, or decreases that the 
registration statement discloses have occurred or may occur. 

6. As mentioned in 4b, company officials have advised us that no consolidated financial statements as 
of any date or for any period subsequent to May 31,20X6, are available; accordingly, the procedures 
carried out by us with respect to changes In financial statements items after May 31,20X6, have, of 
necessity, been even more limited than those with respect to the periods referred to in 4. We have 
Inquired of certain officials of the company who have responsibility for financial and accounting 
matters whether (a) at June 23,20X6, there was any change in the capita! stock, increase in long-term 
debt, or any decreases in consolidated net current assets or stockholders' equity of the consolidated 
companies as compared with amounts shown in die March 31,20X6, unaudited condensed 
consolidated balance sheet included in the registration statement, or (b) for the period from April 1, 
20X6 to June 23,20X6, there were any decreases as compared with the corresponding period in the 
preceding year, in consolidated net sales or in income from continuing operations or of net income. 
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On the basis of these inquiries and 4 >ur^r^ddjng ofthe minutes as described In 4 , nothing came to ou 
attention that caused us to believe'thatthere was any such change, Increase, or decrease, except in c 
I • I I ',11 r.'.roasos, ordecreases ih.it the KHjistration sl.iiemontdi->. * « i . ii>> 
or may occur. 

■ j I'!■ u 11'^f'rilicinformatlonofthe.uldiessoesandtoasslsttheundi’‘.Ml*' ui 
and documenting their inv^)g^pi^§^hi affairs ofthe company ip'.cdnriectibn with the offering 
of the securities covered byMtei^^l^^girJ.statement, and It’ls r^ttd.l^:y^^circulated, quoted, oi 
' i!i»/•'*/' 'f' '•!(. .viihin or withoullheundorwiiting group for any othernujiv*-'- ii'Jidu"] oi.i 
not limited to the reglstrati(^M^^^ 4 ?&ie ofsecuritieS^ 6 Ffei|TO.^^!^lea with or referred to in 
•li« li-' I .r p..ri .11leyistrattonstakifnent or anv other document, exceptthii ■, Vu'vc m.iv i*- 
made to it In the underwritif^^^^^^^^ln any list of d<^^^^^^^^rtalning to the offer! 
'•■■rLtiir- rr.vrf fl by the registration statonuMiL 













Government 


I this lessoiv^H^u should be able to: 

1. Understand the distin^n between "G^AS” and SAGAS'issued by the U.’S; Government' 
Accountability Office) the additional i esponslbihties resultlns frorn the Government Auditing 
Standards. 

2. Understand the circumstances in which the Single Audit Act Is applicable. ^ 


I. Government Auditing Standards —Government Auditing Standards (also known as Generally 

Accepted Government Auditing Standards or GAGAS) are issued by the U.S. Government Accountability 

Office (in GAO's Yellow Book) under the authority of the Comptroller General of the United States. 

A. GAGAS must be followed when required by applicable law, regulation, 
or agreement. These standards may apply to a variety of different 
governmental engagements, includir\g financial audits, performance 
audits, and attestation engagements. 

B. GAGAS go beyond the 10 criteria formerly known as GAAS, and include 
additional general, fieldwork, and reporting standards. 

C. Summary of the Primary Reporting Differences Associated with GAGAS (Relative to 
Engagements under GAAS): 

1. Additional reporting requirements regarding internal control —Government Auditing 
Standards require a written report on internal control in every financial audit under GAGAS. 
This includes commentary about the auditor's understanding of interna! control for planning 
purposes and the assessment of control risk, as well as the scope of the auditor's testing of 
internal control. When the auditor communicates significant deficiencies, the auditor should 
also obtain a response from officials of the entity and include a copy of management's written 
response (or a summary of management's oral response) in the auditor's report. 

2. Additional reporting requirements regarding compliance with applicable laws and 
regulations— Government Auditing Standards require a written report on compliance 
with applicable laws and regulations.This report should distinguish between (a) general 
requirements that apply to all federal financial programs; and (b) specific requirements that 
apply to a particular program by a specific statutory (legislative) requirement. 

a. The auditor should design the audit to provide reasonable assurance of detecting 
instances of noncompliance that have a'Vnate.rial and direct effect" on the entity's 
financial statements. (Similarly, the auditorfhould design the audit to provide reasonable 
assurance of detecting fraud that Is material to the entity's financial statements.) 

b. Management is responsible for Identifying laws and regulations that have a direct and 
material effect on the entity's financial statGnients,"and it is common for auditors to 
obtain written representations from rhanage'mentthat all such laws and regulations have 
been appropriately identified. 

c. The auditor's report on compliance should comment on the scope of the auditor's testing 
of the entity’s compliance with applicable laws and regulations. 

d. The auditor's report on compliance should also include (1) any known instances of fraud 
that are viewed as more than inconsequential; (2) any known instances of illegal acts that 
are viewed as more than Inconsequential; (3) other identified violations of contracts or 
grants that are material; and (4) any known instances of "abu5e"that are material. 

e. Auditors may have a duty to report instances of fraud, illegal acts, or abuse to authorities 
outside the entity (such as a federal inspector general, etc.) when (1) management fails 
to meet its legal requirements to report such matters; or (2) when management fails to 
appropriately respond to identified instances of fraud, illegal acts, or abuse. 


Note 

These additional' 
standards are presented 
at the end of this lesson as;:, 
excerpted from GAO's 2011: 
Yellow Book. 
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3. Additional reporting requirements regarding illegal acts—Government Auditing 
Standards also require the auditor to report any known instances of illegal acts that could 
result in criminal prosecution. 

II. Single Audit Act of 1984, as Amended—The Single Audit Act is applicable to state and local 

governmental entities that have expenditures of federal assistance (grants) now aggregating at least 
$750,000 in a given year. It imposes certain requirements on such entities and their auditors that go 
beyond GAAS and even GAGAS. 

A. Management's Responsibilities under the Single Audit Act Include the Following: 

1. Prepare the financial statements along with a schedule of expenditures of federal assistance. 

2. Prepare a corrective action plan to respond to any current-year audit findings. 

3. Submit certain necessary forms, including the audit report to the designated Federal Audit 
Clearinghouse on a timely basis. 

B. The Auditor's Responsibilities under the Single Audit Act Include the Following: 

1. The audit should be conducted In accordance with GAGAS. 

2. The auditor should identify each major program to be audited based on appropriate risk 
assessment considerations (and materiality should be determined separately for each major 
program). 

3. The auditor should evaluate whether the financial statements and schedule of expenditures 
of federal assistance are fairly presented using appropriate criteria. 

4. The auditor should obtain an appropriate understanding of internal control over the federal 
assistance programs and perform testing of internal control over designated major programs. 

5. The auditor should evaluate the entity's compliance with applicable laws, regulations, or other 
requirements having a direct and material effect on designated major programs. 

6. The auditor should report any Identified audit findings, Including material instances of 
noncompiiance with applicable laws, regulations, orother requirements involving designated 
major programs; identified instances of fraud; and significant deficiencies in internal controls 
over designated major programs. 

C. Summary Comments Regarding the Single Audit Act 

1 . Efficiency— A single coordinated audit of the aggregate federal financial assistance provided 
to a state or local governmental entity (with emphasis on the entity's major programs) is 
intended to result in greater efficiency compared to the alternative, which would be having 
multiple audits of the entity conducted on a grant-by-grant basis. 

2. Added requirements— A single coordinated audit of the aggregate federal financial 
assistance involves more than just a financial statement audit. Additional testing of internal 
control is required for major programs, and additional testing is also required for major 
programs regarding the entity's compliance \yith applicable laws, regulations, or other 
requirements applicable to major programs; 

3. Multiple reports— The auditor should issue reports on (a) the fairness of the entity's financial 
statements (and schedule of expenditures of federal assistance); (b) internal control over 
financial reporting (with emphasis on major programs); and (c) compliance with applicable 
laws, regulations, and other requirements. If audit findings were identified, the auditor should 
also prepare a Schedule of Findings and Questioned Costs. 
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III. GAGAS—Excerpted from GAO's Yellow Book (2011 Edition) 



1. Independence— In all matters relating to the audit wprk, the audit organization and the 
individualauditor, whether government or public, must be independent." 

2. Professional Judgment—Auditors must use professional judgment in planning and performing 
audits and in reporting the results," 

3. Competence— "The staff assigned to perform the audit must collectively possess adequate 
professional competence needed to address the audit objectives and perform the work in 
accordance with GAGAS." 

4. Quality Control and Assurance— "Each audit organization performing audits in accordance with 
GAGAS rnust: 

a. "Establish and maintain a system of quality control that Is designed to provide the audit 
organization with reasonable assurance that the organization and its personnel comply with 
professional standards and applicable legal and regulatory requirements, and 

b. "Have an external peer review performed by reviewers independent of the audit organization 
being reviewed at least once every three years" 


Additional GAGAS Requirements for Performing Finandal Audits: 


1. Auditor Communication —"In addition to the AlCPA requirements for auditor communication, 
when performing a GAGAS financial audit, auditors should communicate pertinent information 
that In the auditors' professional Judgment needs to be communicated to individuals contracting 
for or requesting the audit, and to cognizant legislative committees when auditors perform the 
audit pursuant to a law or regulation, or they conduct the work for the legislative committee 
that has oversight of the audited entity. This requirement does not apply if the law or regulation 
requiring an audit of the financial statements does not specifically identify the entities to be 
audited, such as audits required by the Single Audit Act Amendments of 1996." 

2. Previous Audits and Attestation Engagements —"When performing a GAGAS audit, auditors 
should evaluate whether the audited entity has taken appropriate corrective action to address 
findings and recommendations from previous engagements that could have a material effect on 
the financial statements or other financial data significant to the audit objectives. When planning 
the audit, auditors should ask management of the audited entity to identify previous audits, 
attestation engagements, and other studies that directly relate to the objectives of the audit, 
including whether related recommendations have beerMmplemented. Auditors should use this 
information in assessing risk and determining the nature, timing, and extent of current audit work, 
including determining the extent to which testing the implernentation of the corrective actions Is 
applicable to the current audit objectives." 

3. Fraud, Noncompliance with Provisions of Laws, Regulatrbhs, Contracts, and Grant Agreements, 

; and Abuse —"In addition to the AlCPA requirements cdricerning fraud and noncompliance with . 

■ prayia^^ and regulations, when performing a GAGAS financial audit, auditors should extend 

: the AlCPA requirements pertaining to the auditors'responsibilities for laws and regulations to also 
apply to consideration of compliance with provisions of contracts or grant agreements." 

4. Developing Elements of a Finding— "in a financial audit, findings may involve deficiencies 
V in internai control; noncompliance with provisions of laws, regulations, contracts, or grant 

agreerrients; fraud; or abuse. As part of a GAGAS audit, when auditors identify findings, auditors 
should plan and perform procedures to develop the elements of the findings that are relevant and 
necessary to achieve the audit objectives." . 

5. Audit Documentation—"In addition to the AlCPA requirements for audit documentation, auditors 
should comply with the following additional requirements when performing a GAGAS finandal audit." 


365 




Forming Conclusions and Reporting 


a. "Document supervisory review, before the report release date, of the evidence that supports 
the findings, conclusions, and recommendations contained in the auditors'report." 

b. "Document any departures from the GAGAS,reCjuirements and the impact on the audit and 
on the auditors' conclusions when the audit Is not jn compliance with applicable GAGAS 
requirements due to law, regulation, scope limitations, restrictions on access to records, or 
other issues impacting the audit" 


Additional GAGAS Requirements for Reporting on Financial Audits: 


1. Reporting auditors'compliance with GAGAS— “When auditors comply with ail applicable 
GAGAS requirements for financial audits, they should include a statement in the auditors'report 
that they performed the audit in accordance with GAGAS. Because GAGAS incorporates by 
reference the AlCPA SASs, GAGAS does not require auditors to cite compliance with the AlCPA 
standards when citing compliance with GAGAS." 

2. Reporting on internal control and compliance with provisions of laws, regulations, 
contracts, and grant agreements —"When providing an opinion or a disclaimer on financial 
statements, auditors should also report on internal control over financial reporting and on 
compliance with provisions of laws, regulations, contracts, or grant agreements that have a 
material effect on the financial statements. Auditors report on internal control and compliance, 
regardless of whether or not they identify internal control deficiencies or instances of 
noncompiiance. 

"Auditors should include either in the same or in separate report{s) a description of the scope of 
the auditors'testing of internal control over financial reporting and of compliance with provisions 
of laws, regulations, contracts, or grant agreements." 

3. Communicating deficiencies in internal control, fraud, noncompliance with provisions of 
laws, regulations, contracts, and grant agreements, and abuse— "When performing GAGAS 
financial audits, auditors should communicate in the report on internal control over financial 
reporting and compliance, based upon the work performed, {1) significant deficiencies and 
material weaknesses in internal control; (2) instances of fraud and noncompliance with provisions 
of laws or regulations that have a material effect on the audit and any other instances that warrant 
the attention of those charged with governance; (3) noncompiiance with provisions of contracts 
or grant agreements that has a material effect on the audit; and (4) abuse that has a material 
effect on the audit." 

4. Reporting views of responsible officials —"When performing a GAGAS financial audit, if the 
auditors'report discloses deficiencies in Internal pontrol, fraud, noncompiiance with provisions 
of laws, regulations, contracts, or grant agreements, or abuse, auditors should obtain and report 
the views of responsible officials of the audited entity concerning the findings, conclusions, and 
recomniendatlons, as well as any planned corrective actions." 

5. Reporting confidential or sensitive lnformation‘--^"When performing a GAGAS financial audit, if 
certain pertinent information is prohibited from public disclosure or is excluded from a report due 
to the confidential or sensitive nature of the information, auditors'should disclose in the report 
that certain information has been omitted and the reason or other circumstances that make the 
omission necessary." 

6. Distributing reports— "Distribution of reports completed in accordance with GAGAS depends 
on the relationship of the auditors to the audited organization and the nature of the information 
contained in the report. Auditors should document any limitation on report distribution." 
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Aftsr studying this lesson, you should be able to: 

1, Understand the circumstances in which AU 935 iSASNa 117), Comp/wnceAudit5,JS applicable, 
along with the auditor's responsibilities under this SAS. 


SAS No. 117, Co/r >liain,e Audits, originally issued in clarified fornnat Jt has been reclassified as AU 

935 to be compa ible with International Standards on Auditing, 


I. Relevant AlCPA Guidance— The relevant AlCPA guidance is provided by AU 935, Compliance Audits. 
The standard states that the auditor's objectives are to (1) obtain sufficient appropriate audit evidence 
to forrh an opinion and report whether the entity complied in all material respects with applicable 
compliance requirements (at the level specified in the governmental audit requirement), and (2) 
identify audit and reporting requirements specified In the governmental audit requirements that are 
supplementary to GAAS and Government Auditing Standards and perform procedures to address 
those requirements. 

II. Applicability— When an auditor is engaged to perform a compliance audit in accordance with 
(1) generally accepted auditing standards (GAAS), (2) Government Auditing Standards (also called 
Generally Accepted Government Auditing Standards (GAGAS) from GAO's Yellow Book issued 
under the authority of the Comptroller General of the United States), and (3) a governmental 
audit requirement requiring an expression of opinion on compliance with applicable compliance 
requirements. 

A. This SAS applies to the compliance audit, but not to the financial statement audit part of such an 
engagement—example engagements for which this SAS applies Includes an audit under 0MB 
Circular A-133, Audits of States, Local Governments, and Non-Profit Organizations, also includes a 
department-specific requirement such as"U.S. Department of Housing and Urban Development 
Audit Requirements Related to Entitles Such as Public Housing Agencies, Nonprofit and For-Profit 
Housing Projects, and Certain Lenders." 

B. Definition of Governmental Audit Requirement —A governmental requirement established 
by law, regulation, rule, or provision of contracts or grant agreements requiring that an entity 
undergo an audit of its compliance with applicable compliance requirements related to one or 
more government programs. 

III. Compliance Auditing—Requirements and Guidance 

A. This SAS Incorporated the AlCPA's Risk Assessment Standards 

1. The auditor should perform risk assessment procedures to obtain an understanding of the 
applicable compliance requirements and internal controls over compliance—the nature 
and extent of the risk assessment procedures may vary wItKthe circumstances (such as the 
complexity of the compliance requirements arid the depth of the auditor's knowledge of 
internal control over compliance). 

2. The auditor should assess the risks of material noncompliance (whether due to fraud or error) 
for each applicable compliance requirement and consider whether any of those are pervasive 
to compliance. 

3. The auditor should perform further audit procedures In response to the assessed risks, such as 
develop an overall response to any risks that are pervasive to the entity's compliance; perform 
appropriate tests of details; and perform tests of controls when there is an expectation of 
operating effectiveness or when required to do so. (Note that an example of a pervasive risk 
of noncompliance would be financial difficulty that increases the risk that grant funds will be 
used for unauthorized purposes.) 
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B. Supplementary Audit Requirements—The auditor should identify supplementary audit 
requirements (beyond GAAS and GAGAS) specified in the governmental audit requirement. 

1. Some governmental audit requirements specifically identify the applicable compliance 
requirements, whereas others provide a framework for the auditor to determine the 
applicable compliance requirements. 

2. 0MB Circular A-133, Audits of States, Local Governments and Non-Profit Organizations, 
provides a framework (Compliance Supplement) to determine the compliance 
requirements. 

C. Written Representations—The auditor should obtain written representations from management 
tailored to the entity and the governmental audit requirement. 

D. Subsequent Events— The auditor should perform procedures up to the date of the auditor's 
report to identify subsequent events related to the entity's compliance (e.g., reports from 
grantors regarding noncompliance or Information about noncompliance obtained through other 
professional engagements for the entity); an example of a subsequent event warranting disclosure 
is the discovery of noncompliance causing the grantor to stop the funding. 

E. Evaluating the Evidence and Forming an Opinion— Most governmental audit requirements 
specify that the auditor's opinion on compliance is at the program level (and materiality Is usually 
determined based on the program taken as a whole). 

1. The auditor should consider likely questioned costs (not just known questioned costs) and other 
noncompliance that may not result in questioned costs. 

2. The auditor may include a variety of factors in assessing the risk of noncompliance, including: 
(a) the complexity of the compliance requirements; (b) how long the entity has been subject 
to those compliance requirements; (c) the degree of judgment involved in compliance; and 
(d) the entity's compliance in prior years. 

F. Reporting— The auditor may Issue (1) a separate report on compliance only; (2) a combined 
report on compliance and on internal control over compliance; or (3) a separate report on internal 
control over compliance. 


Combined Report on Compliance with Applicable Requirements and 
Internal Control Over Compliance 

Independent Auditor's Report 


Compliance 

We have audited (entity's name) compliance with the {identify the applicable cornpliance 
requirements or reference 
applicable to 


or refer to a separate schedule > 
1 ,20X1. Compliance with the requirements; 
. Our responsibility is to express an 


referred to above is 
opinion ort (entity's) compliance based on our audit. 

We conducted our audit of compliance in accordance with auditing standards generally accepted In 
the United States of America; the standards applicable to financial audits contained in Government 
Auditing Standards issued by the Comptroller General of the United States; and (name of the 
gpVernmenfal audit requiremehtor program-specific audit guide). Those standards and (name of 
the goverrimefitat audit requirement of programr^ecific audit guide) require that we plan and 
perform the audit to obtain reasonable assurance about whether noncompliance with the compiiani 
requirements referred to above that could hayea rnaterial effect on {identify the government 
program(s) audited or refer to a separate scheduleibat identifies the program(s)). An audit includes: 


368 




Compliance Audits 


examming, on a test basis, evidence about (e«tj^!s) compfiance with, those requlrements and 
performing such Other procedures as we considei«d necessafyin;the circMntstances. We believe 
that our audit provides a reasoriable basis for pur opiiiiohuGur audit does not provide a legal 
determination of (entity's) compliance wiibthdse.requirenients.; ,. 

Inpur opinjoh, (entity's name}^ ipat^iial resets, With the compliance requirernents 

referred to above that are applicable to (identify the govefhrnent programCs) audited) for the year; 

'',ended'June;3p,'20X1''.'''' ^ 

Internal Control Over Compliance 

Management of (entity's name) is responsible for establishing and maintaining effective internal 
control over compliance with the compliance requirements referred to aboveJn planning and 
performing our audit, we considered (entity's) Internal control over compliaince to determine the 
auditing procedures for the purpose of expressing our opinion on compliance, but not for the purpose ^ 
of expressing an opinion on the effectiveness of internal control over compliance. Accordingly, \vedo 
not express an opinion on the effectiveness of (entity's) Internal control over compliance. 

A deficiency in internal control over corfipliance exists when the design or operation of a control does 
not allow management or employees, in the normal course of performing their assigned functions, 
to prevent, or detect and correct, noncompliance on a timely basis. A material weakness In internal 
control over compliance is a deficiency, or combination of deficiencies In internal control over 
compliance, such that there is a reasonable possibility that material noncompiiance with a compliance 
requirement will not be prevented, or detected and corrected, on a timely basis. 

This report is intended solely for the information and use of management, (identify the body or 
individuals charged with governance), others within the entity, (identify the legislative or regulatory . ; 

body), and (identify the grantor agency(ies)) and Is not intended to be and should not be used by 
anyone other than these specified parties. 

■(■Signature) 

(Auditor's city and state) 

(Date) , 


6. Documentation—The auditor should document the risk assessment procedures performed, 
responses to the assessed risks of material noncompiiance, the basis for materiality levels, and 
compliance with applicable supplementary audit requirements. 

H. Communication— The auditor should communicate the following matters with those charged 
with governance; the auditor's responsibilities under GAAS, GAGAS, and the governmental audit 
requirements; an overview of the planned scope and timing of the compliance audit; and any 
significant findings. 

I. Relssuance of the Compliance Report— When reissuing a compliance report, the auditor 
should add an explanatory paragraph describing why the report is being reissued and noting 
any changes from the previously issued report; if additional audit procedures are performed, the 
auditor's report date should be updated. 
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After Studying this lesson, you shouid be able to: 

1. Know the key words that distinguish "unconditional requirements,""presumptively mandatory 

requ(rements,"and "application and other explanatory material " respectively. ^ ^ 

2. Understand the accountant's responsibilities with respect to applicable "interpretive publications" 
and "other preparation, compilation, and review publications" 

3. Know the preconditions that affect whether the accountant may properly accept an engagement to 
be performed under the clarified SSARSs. 


The Clarified SSARSs and General Principles 

The Statements on Standards for Accounting and Review Services (SSARS) are issued by the 
AlCPA's Accounting and Review Services'Committee (ARSC) and are applicable to certain financial 
statement-related services that a CPA may provide to nonissuers. In October, 2014, the ARSC replaced 
substantially ai! of the then-existing SSARSs with clarified SSARSs, similar to what the Auditing 
Standards Board previously did with the Statements on Auditing Standards. The purpose of this 
project was to make the clarified SSARSs easier to read and understand and, therefore, to improve the 
application of these standards in practice. 

Accordingly, the ARSC adopted clarity drafting conventions, such as the following: (1) specified 
objectives for each of the clarified sections of the AR-C (I.e., the clarified SSARS sections); (2) included a 
section on definitions, as applicable, in each AR-C; (3) separated the professional requiremer)ts from the 
application and other explanatory material parts of each AR-C; and (4) adopted formatting techniques 
(e.g., using bullet lists) to improve the flow and readability of each AR-C. 

The clarified SSARSs were issued as SSARS No. 21, Statements on Standards for Accounting and Review 
Services: Clarification and Recodification. It is comprised of four primary sections: 

• Section 60, General Principles for Engagements Performed in Accordance with [SSARS] 

• Section 70, Preparation of Financial Statements 

• Section 80, Compilation Engagements j 

• Section 90, Review of Financial Statements T I 

Historically, the SSARSs involved two types of engagements: (1) reviews; and (2) compilations. 

The clarified SSARSs have added a third type of engagement: engagements to prepare financial 
statements for a client without issuing an accompanying report. 

Previously issued SSARS No. 14, Compilation of Pro Form Fini^ndal Information, is expected to be issued 
in clarified format as a separate SSARS at a later date, Uhtll.thaf happens, the existing AR section 120 
on that topic will remain in effect. 

Compliance with the SSARSs is enforceable under the AiCPA Code of Professional Conduct) including 
the Rule of Conduct dealing with Comp//once w/f/j Stonc/ofc/s. 

Supplemental {more detailed) outlines are provided elsewhere in Wiley CPAexcel® for each of the four 
AR-C sections identified above. 
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i. Requirements—The Genera! Principles retained the two categories of requirements for SSARSs: (1} 
unconditional and presumptively mandatory. 

A. Unconditional Requirements—Indicated by the word must, the accountant is required to 
comply with such a requirement without exception whenever the requirement is relevant. 

B. Presumptively Mandatory Requirements—Indicated by the word should, the accountant Is 
expected to comply with such a requirement, except In rare circumstances. 

1. Noncompliance is allowed if a required procedure would be ineffective in achieving the intent 
of the requirement for a specific engagement. 

2. When not complying with such a requirement, the accountant should perform alternative 
procedures to achieve the Intent of the presumptively mandatory requirement. 

C. Application and Other Explanatory Material (Including Appendices of the SSARSs)—^These 
are not requirements and are presented separately within the SSARSs. Indicated by the words 
may, might, or could, they may explain what a requirement means or provide examples of 
appropriate procedures. 

li. The Role of interpretive and Other Publications 

A. Interpretive Publications—The accountant should consider the guidance of applicable 
interpretive publications in performing the engagement These are recommendations on the 
application of the SSARSs in particular circumstances as issued by ARSC after ARSC members have 
had the opportunity to comment on the proposed interpretations. 


PieBnltion 

interpreti\/e Publications "Interpretations of SSARSs; exhibits to SSARSs; the AlCPA Guide, Compilation 
and Review Engagements, guidance on reviews, compilations, and engagements to prepare financial 
statements included in AlCPA Audit and Accounting Guides; and AlCPA Statements of Position to the 
extent that those statements are applicable to such engagements,” 


B. Other Preparation, Compilation and Review Publications~The accountant should evaluate 
the relevance and appropriateness of such guidance to the engagement. 


Definition 

Orrer Preparation, Compilation, L dri^n-wFubllcatiois r*ui)lu ii ions othei than interpretive 
publications” 


1. These other publications may be useful in understanding the SSARSs, but they have 
no authoritative status and the accountant is not required to be aware of all such other 
publications. 

2. Other publications issued by the AlCPA that have been approved by the AlCPA's Audit and 
Attest Standards team are presumed to be appropriate. Those that have not been reviewed 
by the AlCPA's Audit and Attest Standards team may be considered by the accountant, but 
their influence may be affected by the publication's stature and whether the author is a 
known expert. 
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Hi. Preconditioris 

Circumstances affecting acceptance and continuance of engagements in accordance with the SSARSs 

A. The accountant should not accept an engagement to be performed in accordance with the 
SSARSs if any of the following circumstances exist: 

1. There is reason to believe that relevant ethical requirements (e.g., independence 
requirements) will not be satisfied; 

2. Information that is needed to perform the engagement is unlikely to be either available or 
reliable; or 

3. There is reason to doubt management's Integrity. 

B. Prior to accepting an engagement to be performed in accordance with the SSARSs, the 
accountant should perform the following actions; 

1. Determine that the ethical requirements regarding competence will be satisfied; 

2. Determine whether the financial reporting framework adopted by management is 
acceptable; and 

3. Obtain an agreement that management acknowledges and understands its responsibilities 
for the following: 

a. The selection of the financial reporting framework; 

b. The design, implementation, and maintenance of internal control relevant to the financial 
statements; 

c. The prevention and detection of fraud; 

d. Compliance with applicable laws and regulations; 

e. The accuracy and completeness of the records, documents, and explanations, including 
significant judgments made by management for the financial statements; and 

f. Providing the accountant with access to all relevant information related to the fair 
presentation of the financial statements, additional information requested by the 
accountant, and unrestricted access to personnel. 
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After studying this lesson, you should be able to 

1 . Distinguish between preparation engagements for which AR-C 70, Preparation of financial 
Statements, is applicable and other engagements for which AR-C 70 is not applicable. 

2. Understand the accountant's obligation to obtain written agreement of the terms of the 
preparation engagement. 

3. Know the requirements associated with a preparation engagement, including the accountant's 
documentation requirements. 


Note 

In the past, the SSARSs dealt with only two types of engagements:reviews; and Sb ARSs 

have added a third type of engagement: engagementsto prepareAharidal statemen^^^^^nt without issuing an 
accompanying report, which Is the focus of AR-G 70, Prepflrar/on of jRnctnchiStatem&^^^^^^^^^^fpiepafe financial 
statements, the accountant is also required to comply with the requirements of AR-C ^^enerfl/ Pr/ncip/es, Induding 
meeting the preconditions for accepting the engagement.The accountant is not required to be independent for a 
preparation engagement. . 


I. Obtain an Agreement on the Terms of the Engagement 

A. The accountant and management (or those charged with governance, as applicable) should 
agree on the terms of the engagement, which should be documented in writing (typically in an 
engagement letter, but a contract would also be acceptable). The following should be documented: 

1. The engagement's objective; 

2. Management's responsibilities; 

3. The accountant's responsibilities; 

4. That each page of the financial statements will include a statement that no assurance is 
provided (if such a statement is not included on each page, then the accountant will issue a 
disclaimer to make that point clear); 

5. The limitations of the engagement; 

6. Identification of the applicable financial reporting framework; and 

7. Whether the financial statements are to contain known departures from the applicable 
financial reporting framework (including misstatements or omission of some or all of the 
required footnote disclosures). 

B. The agreement should be signed by the accountant (or firm) and management (or those charged 
with governance). If signed by those charged with governance, the accountant still should obtain 
management's agreement and understanding of its responslbllitles (associated with preconditions 
for accepting the engagement). 

II. Prepare the Financial Statements 

A. Each page of the financial statements should include a statement that "no assurance is provided" 
(or other words to that effect). The accountant's name (or firm) need not be identified. If that 
statement cannot be added to each page, the accountant should issue a disclaimer as to any 
assurance or perform a compilation engagement in accordance with AR-C 80. 

B. The accountant is required to obtain an appropriate understanding of the financial reporting 
framework to be used and the significant accounting policies applicable to the financial statements. 

C. If the financial statements usea special purpose framework, the accountant should include a 
description of the financial reporting framework on the face of the financial statements or in a 
footnote. 
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D. When assisting management with significant judgments, the accountant should discuss those 
judgments with management so that management understands those judgments and can take 
responsibility for them. 

E. When records, documents, or other information used in preparing the financial statements are 
viewed as incomplete or Inaccurate, the accountant should request additional or corrected 
information. 

F. When financial statements contain known departures from the applicable financial reporting 
framework {including omission of some or all required disclosures), the accountant should discuss 
the matter with management and disclose those departures in the financial statements. If the 
omission appears intended to mislead users of the financial statements, the accountant should 
not prepare the financial statements. 

III. Documenting a Preparation Engagement 

A. The accountant should document the preparation engagement in enough detail to clearly 
show the work performed and should include (1) the engagement letter (or other written 
documentation); and (2) a copy of the financial statements prepared. 

B. Noncompliance with a presumptively mandatory requirement —In rare circumstances, the 
accountant may depart from a relevant presumptively mandatory requirement; however, the 
accountant must document the reason(s) for the departure and how alternative procedures 
satisfied the intent of that presumptively mandatory requirement. 

iV. Applicability of AR-C 70 

A. In addition to preparing traditional financial statements, this section also applies to preparation of 
the following: 

1. Specified elements, accounts, or financial statement items; 

2. Supplementary information and required supplementary information; 

3. Pro forma financial information; and 

4. Prospective financial Information {forecasts or projections). 

B. An appendix identified the following examples to which AR-C 70 applies; 

1. Preparing financial statements prior to audit or review by another accountant; 

2. Preparing financial statements to be presented alongside the tax return; 

3. Preparing personal financial statements for pres^tation alongside a financial plan; 

4. Preparing single financial statements (e.g., just a balance sheet) with substantially all 
disclosures omitted; and 

5. Preparing financial statements using general ledger information outside of an accounting 
software system. 

C. AR-C 70 identified certain engagements to which AR-(Z 70.does not apply: 

1. Engagements to perform audit, review, or compilation services; 

2. Preparing financial statements for submission to taxing authorities; 

3. Preparing financial statements as part of personal financial planning; 

4. Preparing financial statements in connection with litigation services or business valuation 
services; or 

5. Performing bookkeeping services (i.e., merely assisting with preparing financial statements, 
rather than preparing). 
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After studying thi. kssoiir you should be able to: 

1. Kno\^hat is m^tst^lhe term "compilation" 

2* Un^^tand the^^^gtant's responsibilities when performing a compilation engagement. 

3. Knp^lie struct^^rf| content of the accountant's report for a compilation engagement 


Note _ .. 

AYornpilatidn" engagement involves assisting management In presenting the financial statements (or. other historical^ ^ 
pro forma, dr prospective financial information) along iwlltithe accountant's accompanying report, whicKprovides no ■■■mm. 
assurance about those financial statements (or other financial ihfdrrnatidn);The accountant is also required to comply 
with the requirements of Ar c 60 (Genera/fir/ncip/es), including meeting the''precondltions"foraccept]ng the compilation 
engagement. The accountant is not required to be independentfor a compilation engagement, since no assurance is . 
provided. Guidance is provided in the Clarified SSABSs, specifieallyby AR'C 80, Comp/faf/on Engagements. 


i. Obtain an Agreement on the Terms of the Engagement 

A. The accountant and management {or those charged with governance, as applicable) should 
agree on the terms of the engagement, which should be documented in writing (typically 
in an engagement letter, but a contract would also be acceptable). The following should be 
documented: 

1. The engagement's objective; 

2. Management’s responsibilities; 

3. The accountant's responsibilities; 

4. The limitations of the engagement (see the note below); 

5. Identification of the applicable financial reporting framework; and 

6. The expected form and content of the compilation report (and a statement that, depending 

on circumstances, the actual report issued may differ from the expected report in form and 
content). , 


Note 

An exhibit to ARtC SO.provJdes a sample engagement letter for a coffipilation engagement which includes the following 
exampiedfatirnitationoftheengagementfregardingtheaccduntant'siiability):- 

"You agree to hold us;harmie5s and to release, indemnify, and defend usfrofh any liability or costs> including attorney's fees, , 
resulting from management's knowing misrepresentations to us"'^ 


B. The agreement should be signed by the accountant (or firm) and management (or those charged 
with governance), if signed by those charged with governance, the accountant should still 
obtain management's agreement and understanding of its responsibilities (associated with the 
"preconditions"for accepting an engagement). 

il. Performance Responsibilities for a Compilation Engagement 

A. Understanding the Applicable Reporting Framework— The accountant should obtain an 
appropriate understanding of the financial reporting framework and the significant accounting 
policies applicable to the entity's financial statements. 

B. Read the Financials—The accountant should read the financial statements to evaluate whether 
they are free of obvious material misstatements. 
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C. Incomplete/Unsatisfactory Records—If the accountant believes that the records or other 
information is incomplete or Inaccurate, the accountant should request further or corrected 
information. 

D. Revisions Required—If the accountant discovers a need for revision to the financial statements, 
the accountant should propose appropriate revisions to management. 

E. Withdrawal—If management has failed to provide records or information as requested or if 
management does not make appropriate adjustments as proposed by the accountant, the 
accountant should withdraw (and inform management of the reasons for withdrawing). 

ill. Reporting Responsibilities for a Compilation Engagement 

A. The accountant's compilation report normally consists of the following: 

1. A statement that management (owners) of the identified entity is (are) responsible for the 
financial statements and that identifies the financial statements (and date/period) involved; 

2. A statement that the compilation was performed in accordance with SSARSs promulgated by 
the AlCPA's Accounting and Review Services Committee; 

3. A statement that the accountant did not audit or review the financial statements, etc., and the 
accountant does not provide any assurance on them; 

4. A statement that disclaims an opinion or any form of assurance; and 

5. The signature of the accountant (or the accountant's firm), along with the city and state of the 
office, and the date of the report. (Presenting the report on the accountant's letterhead is an 
acceptable way to identify the accountant's city and state.) 


Note;' 

The accountant may request that management add a reference to each pageofthe financial statements, such as "See, , : !• 

Accountant’s Compilation Report" (or something similar), but that is not required. 


Sample Compilation Report (Under Clarified SSARSs) 

Accountant's Compilation Report 

Management is, responsible for the accompanying financial statements of XYZ Company, which. : 
comprise the balance sheets asof December 31,20X1 and 20X2; the related statements of income, v u 
changes in stockholders'equity, and cash flows for the years then ended, and the related notes to ,. ?; ^^ 
the financial statements in accordance with accounting principles generally accepted in the UnltedP^f^l 
States of Arrierica, I (We);have performed compilation engagements in accordance with StatementS prt) 
Standards for Accounting and Review Services promulgated by the Accounting and Review Services 
Committeepf the AlCPA.'i (We) did hot audit or review the ^ahdal statements nor was (were)T;-^; Y;:Yy 
(we) required to perform any procedures to verify the aecura.^yor completeness of the information 
provided by management. Accordingly, I (we) do pot express an opinion, a conclusion, 6r provideany « 
form of assurance on these financial statements. 

[Signature of accounting firm or accountant, as appropriate! . . 

[Accountant's city and state] 

[Date of the accountant's report] 
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In summary, the compilation report normally consists of four sentences: 

‘ Management is responsible for the accompanying financial statements of XYZ Company, 
which comprise the balance sheets as of December 31,20X1 and 20X2, the related statements 
of income, changes in stockholders'equity, and cash flows for the years then ended, and the 
related notes to the financial statements in accordance with accounting principles generally 
accepted in the United States of America. 

• I (We) have performed compilation engagements in accordance with Statements on 
Standards for Accounting and Review Services promulgated by the Accounting and Review 
Services Committee of the AlCPA. 

• I (We) did not audit or review the financial statements nor was (were) I (we) required to 
perform any procedures to verify the accuracy or completeness of the information provided 
by management. 

• Accordingly, I (we) do not express an opinion, a conclusion, or provide any form of assurance 
on these financial statements.' 

!V. Compilation Report when Financial Statements Use a Special-Purpose Framework 

1. When using a special-purpose framework, the report should include a separate paragraph stating 
that the financial statements are prepared In accordance with the particular special-purpose 
framework and that refers to the note to the financial statement describing the framework. 

2. When the financial statements are prepared using a regulatory basis or a contractual basis of 
accounting, the report should identify the purpose for which the financial statements were 
prepared (or refer to a note that provides that information). 

3. Unless the financial statements omit substantially all disclosures, the accountant should modify 
the report when the financial statements omit (a) a description of the special-purpose framework; 
(b) a summary of significant accounting policies; (c) a description of how the special-purpose 
framework differs from GAAP (although the differences need not be quantified); or (d) appropriate 
informative disclosures. 

V. Reporting when the Accountant Is Not Independent 

1. The last paragraph of the report should state that the accountant was not independent [either 
a single sentence without indicating the reason or with additional commentary indicating the 
reason(s) for the impairment). 

2. If stating any reason(s) for the impairment, the accountant should identify ail applicable reasons 
for the lack of independence. 

Vi. Reporting when Substantially All Disclosures Are Omitted 

1. If the omission of disclosures appears to be Intended to mislead financial statement readers, the 
accountant should not issue a compilation report. 

2. When the financial statements omit substantially all disclosures, the compilation report should 
include a paragraph pointing out that fact, including a statement that the financial statements are 
not designed for those who are uninformed abodtsuch matters. (The accountant should not Issue 
a report on "comparative" financial statements of one year that omit substantially all disclosures 
along with financial statements of another year that include applicable disclosures. Such financial 
statements would not be viewed as comparable.) 

3. If most disclosures are presented but selected disclosures are omitted, the report should identify 
the nature of the departure and any known effects. 
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VII. Reporting Known Departures from the Applicable Financial Reporting Framework 

1. Material departures that are not disclosed in the notes should be reported in a modified 
compilation report in a separate paragraph. (If the accountant believes that modification of 
the report is not an adequate way to communicate the deficiencies, the accountant should 
withdraw.) 

2. The effects of the departure should be disclosed If known. The accountant is not required to 
determine the effects, however, and can state in the report that management has not made such 
a determination. 

3. The accountant should not add a statement to the report stating that the"financial statements 
are not in conformity with [the applicable financial reporting framework]," which is equivalent to 
expressing a conclusion. 

VIII. Documentation Requirements for a Compilation Engagement—The documentation should 

provide a clear understanding of the accountant's work and, at a minimum, include the following; 

A. The engagement letter (or other appropriate written documentation); 

B. A copy of the financial statements; and 

C. A copy of the compilation report. 



After studying this lesson, you should be able to: 

1. Know what is meant by the term review of a hphisttgrv 




with the S$ARSs. ^ 

3. Know the structure and 
&.#s;:WiththeSSARSs. - ; 



m aceoroan(.(L 




A "review"ehgagement involves obtaining limited assurance" (primarily by analytial procedures and inquiry of 
management) as to whether material modifications should be made to an eri^^^^nclal statements to be presented 
in accordance with the applicable financial reporting framework. The accountant Isalso required to comply with the 
requirements of AR-C 6Q (General Principles), including meeting the "precohdibon^for acceptii^lthe review engagement. 

The accountant is required to be independerrtfera review engagement, slnce'’negaaveassurant^'’is provided. <5u.danGe is ^ 
provided in the Clarified SSARSs, specifically ^y AR-C 90, Review Engagements. ■— 


I. Obtain an Agreement on the Terms of the Engagement 

A. The accountant and management (or those charged with governance, as applicable) should 
agree on the terms of the engagement, which should be documented in writing (typically in an 
engagement letter).The following should be documented: 

1. The engagement's objective 

2. Management's responsibilities 

3. The accountant's responsibilities 

4. The limitations of the engagement (see the note below) 

5. Identification of the applicable financial reporting framework; and 

6. The expected form and content of the review report (and a statement that, depending on 

circumstances, the actual report issued may differ from the expected report in form and 
content). ^ 

B. The agreement should be signed by the accountant (or firm) and management (or those charged 
with governance). If signed by those charged with governance, the accountant should still 
obtain management's agreement and understanding of its responsibilities (associated with the 
"preconditions" for accepting an engagement). 

C. Understanding of the Industry and Knowledge of the Entity —^The accountant should obtain 
an understanding of the entity's industry, its business (including its organization and operations) 
and the accounting principles and practices us^d;(lhduding the nature of its financial statement 
elements). 

li. Designing and Performing Review Procedures —^The accountant should design and perform 
analytical procedures and make inquiries (and perform any other procedures as needed) to obtain 
"limited assurance" as a basis for the review report. 

A. Risk Assessment—^The accountant should focus the review procedures in the areas believed 
to be at higher risk of material misstatements. However, the accountant does not obtain an 
understanding of internal control for purposes of assessing control risk. 

B. Analytical Procedures—-The accountant should use analytical procedures as a basis for inquiry 
about relationships that appear unusual and should investigate significant differences relative to 
expectations by inquiring of management and performing other review procedures as needed. 
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C. Inquiries of Management—The accountant should inquire about (but is not required to 
corroborate) the following: 

1. Whether the financial statements are fairly and consistently presented 

2. Whether unusual situations impact the financial statements 

3. Whether there are significant transactions, especially at period-end 

4. The status of any uncorrected misstatements; 

5. Any matters called into question by the review procedures 

6. The effect of any subsequent events 

7. Management's knowledge of fraud or suspected fraud involving management, employees 
with significant Internal control responsibilities, or others where the effect could be materia! 

8. Any allegations of fraud or suspected fraud by employees, former employees, or others 

9. Any instances of noncompliance with laws and regulations that could be material to the 
financial statements 

10. Significant adjusting journal entries relevant to the financial statements 

11 . Any communications from regulatory authorities 

12. Related-party relationships and transactions with related parties 

13. Litigation, claims, and assessments that should be considered 

14. Whether management's significant assumptions affecting accounting estimates are 
reasonable 

15. Any actions at meetings of stockholders, directors, or others that should be considered in the 
financial statements 

16. Any other matters considered relevant by the accountant 

D. Reading the Financial Statements— The accountant should read the financial statements for any 
indications of departures from the applicable framework. 

E. Reconciling to Underlying Records— The accountant should verify that the financial statements 
agree to (or reconcile to) the accounting records. 

F. Incomplete/Unsatisfactory Records— If the accountant believes that the records or other 
information is incomplete or inaccurate, the accountant should request further or corrected 
information. 

G. Written Representations— The accountant should obtain written representations from 
the appropriate members of management (usually the chief executive officer and chief 
financial officer); the representations letter should have the same date as the review report. (If 
management does not provide the required representations, the accountant should withdraw.) 

III. Reporting Responsibilities for a Review Engagement 

A. The accountant's review report normally consists of the following: 

1. A title, such as "Independent Accountant's Review Report" 

2. An appropriate addressee 

3. An introductory paragraph (without a label) that identifies the financial statements that were 
reviewed (and dates/periods involved), that states that a review consists primarily of analytical 
procedures and inquiries, and that states that a review is substantially less in scope than an 
audit (with a disclaimer of opinion) 

4. A section entitled "Management's Responsibility for the Financial Statements that identifies 
management's responsibilities for the financial statements and internal control 
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5. A section entitled "Accountant's Responslbility"that references the SSARSs promulgated by 
the ARSC of the AlCPA and refers to "limited assurance" as a basis for reporting 

6. A section entitled "Accountant's Conclusion"that provides negative assurance on the financial 
statements and 

7. The signature of the accountantortheaccountant'sfirm, the city and state where the 
accountant practices, and the date of the report. 

Sample (Clarified) Review Report on Comparative Financial Statements 
Independent Accountant's Review Report 

(Appropriate Addressee] : 

i (We) have reviewed the accompanying financial statements of XYZ Company, which comprise the 
balance sheets as of December 31,20X2 and 20X1, and the related statements of income, changes in 
stockholders' equity, and cash flows for the years then ended, and the related notes to the financial 
statements. A review includes primarily applying analytical procedures to management's (owners') 
financial data and making inquiries ofpompany management (owners). A review is substantially less 
in scope than an audit, the objective'bf which Is the expression of an opinion regarding the financial 
statements as a whole. Accordingly, i (we) do not express such an opinion. 

Management's Responsibility for the Financial Statements 

Management (Owners) is (are) responsible for the preparation and fair presentation of these financial 
statements in accordance with accounting principles generally accepted in the United States of 
America; this includes the design, implementation, and maintenance of internal control relevant to , 
the preparation and fair presentation of financial statements that are free from material misstatement 
whether due to fraud or error. 

Accountant's Responsibility 

My (Our) responsibility is to conduct the review engagements in accordance with Statements on j 

Standards for Accounting and Review Services promulgated by the Accounting and Review Services ! 
Committee of the AtCPA. Those standards require me (us) to perform procedures to obtain limited I 
assurance as a basis for reporting whether I am (we are) aware of any material modifications that 
should be made to the financial statements for them to be in accordance with accounting principles 
generally accepted in the United States of America. I (We) believe that the results of my (our) 
procedures provide a reasonable basis for our conclusion. - 

Accountant's Conclusion 

Based on my (our) reviews, I am (we are) not aware 6far^^aterlal modifications that should be made' 
to the accompanying financial statements In order fortfiem to be in accordance with accounting 
principles generally accepted in the United States of Arherica. 

{Signature of accounting firm or accountant, as appropriate! ,- 

{Accountant's city and state] ^ ■ 

{Date of the accountant's report] 


B. Review report when financial statements use a special-purpose framework. 

1. When using a special-purpose framework, the report should include an "emphasis-of-matter" 
paragraph stating that the financial statements are prepared in accordance with the special 
purpose framework and referencing the note to the financial statement describing the framework. 

2. When the financial statements are prepared using a regulatory basis or a contractual basis of 
accounting, the report should identify the purpose for which the financial statements were 
prepared (or refer to a note that provides that information) and restrict the distribution of the 
report. 
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3. The accountant should modify the report when the financial statements omit (a) a description 
of the special-purpose framework, (b) a summary of significant accounting policies, (c) 
a description of how the special-purpose framework differs from GAAP {although the 
differences need not be quantified), or (d) appropriate informative disclosures. 

C. Reporting Known Departures from the Applicable Financial Reporting Framework 

1. If the accountant believes that modification of the report is not an adequate way to 
communicate the deficiencies, the accountant should withdraw. 

2. When modifying the review report, the departure should be identified in a separate 
paragraph, labeled "Known Departures from the [identify the applicable financial reporting 
framework]" The effects on the financial statements should be included, if known. (The 
accountant is not required to make that determination if management has not, but the report 
should state that such determination has not been made by management.) 

3. The "Accountant's Conclusion" paragraph would be modified (for example) as follows: "Based 
on my (our) review, except for the issue noted in the Known Departure from Accounting 
Principles Generally Accepted in the United States of America paragraph, I am (we are) 

not aware of any material modifications that should be made... .''(The "Known Departure" 
paragraph would follow the "Accountant's Conclusion" paragraph.) 

4. The review report should avoid stating that the financial statements are not in accordance 
with the applicable framework, since that is effectively expressing an adverse opinion, which 
is inappropriate for a review. 

D. Review Documentation 

1, In general, the documentation should permit an experienced accountant with no prior 
connection to the engagement to understand the following; 

a. The nature, timing, and extent of review procedures performed in compliance with the 
SSARSs 

b. The evidence obtained from the procedures performed and 

c. Significant findings, conclusions reached, and significant professional judgments involved 

2. Specifically, the documentation should include the following 

a. The engagement letter (or other written documentation) 

b. Communications about fraud or noncomplianc^with laws 

c. Communications about emphasis-of-matter or other-matter paragraph(s) In the 
accountant's review report 

d. Communications with other accountants associated with component financial 
statements 

e. The representation letter obtained from management and 

f. A copy of the financial statements and the review report 
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SSARSs—Other Topics 


After studying this lesson, you should be able to: : ' : • 

1. Know how the accountant's report (fojra corapjjatjpnandfbra 'revie^^ engagement) is affected 


2 . 


3. 


4. 


5. 


when "required supplementary information" is relevantto the entity's financial sfetements. 

Understand the accountant's resppnisibiliffes tinder SSARSs wheh-'subsequently discovered facts" 
are identified before the report release date,as well as after the report release date, 




Understand the accountant's responsibilities under SSAf^s when engaged to cornpiie"prdldrma"^^:.^^^^^ 

financial information. , v. 

' > '• > ' ' .' ' ' ' ' 

Know how the accountant's report (for a compilation and for a review engagement) is affected .. 

wheh the entity's financial statements are accompanied by"supp|emental information " 

Know the distinction between a "forecast" and a "projection" and the different types of professional 
services that are permitted for such prospective financial information. ; v 


i. Compilation of Pro Forma Financial Information 
Note ' , ' 

The purpose of "pro forma''fihandal (nformatiorr is to show the significant effects on historical finanga! information that 
might have resulted had an actual or proposed transaction occurred at an earlier date. The Statemerits bn Standards fph . 
Attestation Engagements provide guidance to practitioners when performing an ''examlnation"or"reyiew''engagement: 
iriVblvihg pro forma information. Compilation of pro forma financial information is addressed in the SSARSs; • 


A. A Requirement to Perform a Compilation of Pro Forma Financial Information—^The 
accountant must have compiled, reviewed, or audited the historical financial statements on which 
the pro forma information Is based. 

B. Engagement Letter —The accountant and the entity (management) should establish an 
understanding in writing as to the nature and limitations of the services to be performed and the 
nature of the report to be issued. 

1. That understanding should specifically state that the engagement cannot be relied on to 
disclose errors, fraud, or illegal acts. 

2. That understanding also should state that the accountant will inform the appropriate level 
of management of any material errors and of any ir^fermation coming to the accountant's 
attention that fraud or illegal acts may have occurred (excluding matters that are "clearly 
inconsequential"). 

C. Performance Requirements —The accountant should read the compiled pro forma financial 
information (including the summary of significant assumptions) and consider whether that 
information appears to be free of obvious material errors. 

D. Reporting Requirements 

1. The pro forma financial information should be clearly labeled in a manner that distinguishes it 
from historical financial statements. 

2. Each page of the compiled pro forma financial Information should include a reference such as 
"See Accountant's Compilation Report." 

3. The accountant is not required to be Independent since no assurance is provided. If the 
accountant is not independent, the compilation report should indicate that fact. 

4. The accountant may "assist" with the preparation of pro forma financial information without 
issuing a compilation report (when the accountant has not been engaged to "compile" such 
information). 

5. The compilation report should not describe any other procedures performed by the 
accountant either prior to or during the compilation engagement. 
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li. Supplemental Information 


'Note,.'. - c's.';:'; v?-,'':'' 

WheRthe financial statements areacc6mpanled6y"syj2^^nf^itallnfbfmation"Sssociated vyith either a comp : 

revfeiwengagfelnent/theaccpuiitanishould indicate 

feitheri(lifnarigther^atterparagraph;inthecompila^.oporJr^^j^^tWgT;{2);lna5eparatergport^ 


A. When the Accountant Has Reviewed the Supplementary Information along with the 
Financial Statements— The report should state that (1) the supplementary information is 
presented for additional analysis artd Is not required as part of the financial statements; (2) 
the supplementary information is the responsibility of management; (3) the supplementary 
information was subjected to the review procedures applied to the review of the financial 
statements (and indicate whether the accountant is aware of any material modifications that 
should be made to it); and (4) the accountant has not audited the supplementary information and 
does not express an opinion on It. 

B. When the Accountant Has Not Reviewed the Supplementary Information along with the 
Financial Statements— The report should state that (1) the supplementary information is 
presented for additional analysis and is not required as part of the financial statements; (2) the 
supplementary information is the responsibility of management; and (3) the accountant has 
not audited or reviewed the supplementary information, and does not express an opinion, a 
conclusion, or any assurance on it. 

III. Required Supplementary Information 


Note . 

When "required supplementary information" is relevant to financial statements associated writh either a compilation or 
review engagement, the accountant's compilation or review report should include an "other-matter" paragraph that 
comments on the applicable circumstances: 

A. That the required supplementary information Is included and the accountant performed a compilation or review • 
engagement on it; 

8. That the required supplementary information is included and the accountant did not perform a compilation, 
review,orauditonit; 

C. That the required supplementary information Is omitted; 

D. That some required supplementary information is included and some is omitted 

E. Thattheaccountantidentlfieddeparturesfromtheprescribedguidelines(establishedbythedesignated 
accounting standard-setting body); or 

F. That the accountant has doubts as to whether the information is presented in accordance with the prescribed 

guidelines. . 


IV. Preparation or Compilation of Prospective Financial Information 


DeHiiitions , 

Prospective fincinciai information: "Any financial information about the future.The Inforrnation may be 
presented as complete financial statements or one or more elements, items, or accounts." 

' Financial forecast/Vrospective financial statements that present/to the best of the responsible party's 
knowledge and belief, an entity's expected financial position, results of operations, and cash flows. A 
financial forecast is based on the responsible party's assumptions reflecting conditions it expects to 
exist and the course of action it expects to take." 

Financial projection: Prospective financial statements that present to the best of the responsible 
party's knowledge and belief, given one or more hypothetical assumptions, an entity's expected 
financial position, results of operationsi and cash flows. Afinandal projection is sometimes prepared 
to present one or more hypothetical courses of acbon for evaluation, as in response to a question that 
beginsforinstance,"Whatwouldhappenif; 
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SSARSs—Other Topics 


A. Under the Ciarified SSARSs 

1. The accountant may perform either a preparation engagement or a compilation of 
prospective financial information (a review of such prospective financial information is not 
permitted). 

2. When engaged to prepare prospective financial information or issue a compilation report on 
prospective financial information: 

a. Significant assumptions —^The accountant should not prepare (or issue a compilation 
report on) prospective financial Information that omits disclosure of the summary of 
significant assumptions; the entity's financial statements should also include a summary 
of significant accounting policies. 

b. Financial projections —The accountant should not prepare or issue a compilation report 
on a financial projection that (a) fails to identify the hypothetical assumptions or that (b) 
omits a description of the limitations of the usefulness of the projection; any report on 

a projection should be restricted to specified users, consisting of third parties in direct 
negotiation with the responsible party (which allows them to ask questions about the 
presentation). 

3. When issuing a compilation report on prospective financial information—The report should 
include statements that (a) the forecasted/projected results may not be achieved; and (b) 
the accountant assumes no responsibility to update the report for matters occurring after 
the date of the report. (Any report on a "projection" must have restricted distribution; only a 
report on a "forecast" Is permitted to have general distribution.) 

B. Under the Clarified Statements on Standards for Attestation Engagements (SSAEs) — 

The accountant may be engaged to perform an "examination" or an "agreed-upon procedures 

engagement" on prospective financial Information (again, a review of prospective financial 

information is not permitted under the SSAEs). Examinations and agreed-upon procedures 

engagements under the SSAEs are addressed in other lessons of Wiley CPAexcel®. 

1. Examination engagements —An examination results in a positive expression of opinion 
(similar to an audit report) focusing on the preparation of the prospective Information and 
management's underlying assumptions; an examination report on a forecast is allowed to 
be issued for genera! distribution (but any report on a projection should have restricted 
distribution). 

2. Agreed-upon procedures engagements —Any agreed-upon procedures report must be 
restricted to the specified users who take responsibility for the sufficiency of the procedures 
for their purposes; assurance is provided in the form of "procedures"and "findings". 

V. Review Engagements—Other Miscellaneous Topics. ' 

A. Subsequent Events and Subsequently Discovered Facts 

1 . Subsequent events —The accountant should request that management consider the 
appropriateness of the financial statement tr^atmerif when subsequent events are identified. 

2. Subsequently discovered facts before the report release date: 

a. The accountant should discuss the matter with management (and those charged with 
governance, as applicable) and determine how management intends to deal with the 
matter when the financial statements require revision. 

b. If management revises the financial statements, the accountant should perform review 
procedures on the revision and either change the date on the review report or "dual-date" 
the report. 

c. if management does not revise the financial statements, the accountant should modify 
the review report appropriately. 
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3. Subsequently discovered facts afterthe report release date: 

a. The accountant should discuss the matter with management (and those charged with 
governance, as applicable) and determine how management intends to deal with the 
matter when the financial statements require revision. 

b. If management revises the financial statements, the accountant should perform review 
procedures on the revision, and either change the date on the review report or "dual¬ 
date" the report. The accountant also should determine whether third parties possess 
those released financial statements and evaluate whether management is taking 
appropriate steps to inform them that the financial statements should not be used. 

c. If management is not taking the appropriate steps, including revision, the accountant 
should notify management and take action to prevent the use of the accountant's review 
report. The accountant may wish to seek legal guidance in that event. 

B. Comparative Financial Statements 

1. The report should referto each applicable period for which financial statements are 
presented. (The type of engagement need not be the same for each period presented. For 
example, one period might be a compilation and another period might be a review; or one 
period might be a review and another period might be an audit.) 

2. A continuing accountant should update the report on any prior periods'financial statements 
that are presented along with the current period. 

3. Reporting when the prior period was audited— if the audit report on the prior period's 
financial statements is not presented, the review report should include an "other-matter" 
paragraph to indicate that the prior period's financials were audited; to identify the date of 
that audit report and the type of opinion expressed (and the reasons for any modifications); 
and to state that no audit procedures were performed after the date of the audit report, 

4. When changing reference to a previously reported departure —The review report should 
include an "other-matter" paragraph to explain the removal of the previously reported 
departure. 

C. Changing the Engagement from an Audit to a Review 

1. The accountant should decide whether such a change is appropriate and consider (1) the 
reason(s) expressed for the change and (2) the incremental effort and cost to complete the 
audit. 

2. A change in circumstances or a misunderstanding'about the nature of an audit or review 
engagement usually would be considered a satisfactory reason for requesting a change in the 
engagement. 

3. If an accountant was engaged to perform an audit but management refused to allow 
correspondence with the entity's attorney, the accountant normally would be prohibited from 
changing the engagement to review the entity's financial statements. 
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Independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statements of ABC Partnership, which comprise the 
statement of assets and liabilities arising from cash transactions as of December 31,20X1, and the 
related statement of revenue collected and expenses paid for the year then ended, and the related 
notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management Is responsible for the preparation and fair presentation of these financial statements in 
accordance with the cash basis of accounting described in Note X; this includes determining that the 
cash basis of accounting is an acceptable basis for the presentation of the financial statements in the 
circumstances. Management is also responsible for the design, implementation, and maintenance of 
interna! control relevant to the preparation and fair presentation of financial statements that are free 
from materia! misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, including 
the assessment of the risks of material misstatement of the financiai statements, whether due to 
fraud or error. In making those risk assessments, the auditor considers internal control relevant to 
the partnership's preparation and fair presentation of the financial statements in order to design 
audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an 
opinion on the effectiveness of the partnership's Internal control. Accordingly, we express no such 
opinion. An audit also includes evaluating the appropriateness of accounting policies used and the 
reasonableness of significant accounting estimates made by management, as well as evaluating the 
overall presentation of the financial statements. 

We believe that the audit evidence we have obtained is-stTfHcient and appropriate to provide a basis 
for our audit opinion. : " 

Opinion . ' 

in our opinion, the financial statements referred to above.pr^sent fairly, In all material respects, the 
assets and liabilities arising from cash transactions otABC Partnership as of December 31,20X1, and its 
revenue collected and expenses paid during the year then ended in accordance with the cash basis of 
accounting described in Note X. : 

Basis of Accounting 

We draw attention to Note X of the financial statements, which describes the basis of accounting. The 
financial statements are prepared on the cash basis of accounting, which is a basis of accounting other 
than accounting principles generally accepted in the United States of America. Our opinion is not 
modified with respect to this matter. 

(Auditor's signature) 

(Auditor's city and state) 

(Date of the auditor's report) 
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Independent Auditor's Report 


(Appropriate Addressee) 

We have audited the accompanying financial statements of XYZ City, Any State, which comprise cash 
: and unencumbered cash for each fund as of December 31,20X1, and the .related statements of cash 
receipts and disbursements and disbursements budgeted and actual for the year then ended, and the 
related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with the financial reporting provisions of Section Y of Regulation Z of Any State. 
Management is also responsible for the design, implementation, and maintenance of internal control 
relevant to the preparation and fair^presentation of financial statements that are free from material 
misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We . 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 

about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, including 
the assessment of the risks of material misstatement of the financial statements, whether due to 
fraud or error. In making those risk assessments, the auditor considers internal control relevant to 
the partnership's preparation and fair presentation of the financial statements in order to design 
audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an 
opinion on the effectiveness of the partnership's internal control. Accordingly, we express no such 
opinion. An audit also includes evaluating the appropriateness of accounting policies used and the 
reasonableness of significant accounting estimates made by management, as well as evaluating the 
overall presentation ofthe financial statements. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinions. . . ' 

Basis for Adverse Opinion on U.S. Generally Accepted Accounting Principles 

As described in Note X ofthe financial statements,.the financial statements are prepared by XYZ City 
oh the basis of the financial reporting provisions of Section Y of Regulation Z of Any State, which is 
a basis of accounting other than accounting principles generally accepted in the United States of 
America, to meet the requirements of Any State. 

The effects on the financial statements of the variances between the regulatory basis of accounting 
described in Note X and accounting principles generally accepted in the United States of America, 

although not reasonably determinable, are presumed to be material. 
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F/S Prepared on Regulatory Basis (for General Use) 


Adverse Oir.-fc'i on U.S. Geopraflv Accepted Accounting Principles 

In our opinion, because of the significance of the matter discussed in the "Basis for Adverse Opinion c 
U:> GsiieinlivA(rMj'c J AteoiinlingPnncipit t'<''r<KjMph thr financial'i i 'v i'r<-dtoihr ^ 
do not present fairly, in accordance with accounting principles generally accepted in the United State 
ofAm-iKf tnp»'i ii I''Position of each fund 01 XV/City 0 ^ of Ui I embLi i I Wl h 
finapcwi oos«*inn cr cash flows Uu*reot for llu* >eai thei' eifocd 

Opinion or "e^ufatory Basis of Accounting 

Inouropinv?'! t^'oTiv uial statements referred to duuve present fairly, in dll matenalicspt^its the 
I rish jiid iinent -imhered Cash of each fund of XY^ Lity as of December 

31, '>0X1, and tneir respective cash receipts and disbursements, and budgetary results lo* the yeac 
the 11 ended in ai.cvid(ince with the finance! leporting provisions of Ser iir>n Y of BeQUi?*ii >n 7 or >\iiy 
StptedescnoedinNoV / 

(Auditor's signature) 

(Auditor's cityand state 

(Date of the auditor's re 








Profit Participation 


independent Auditor's Report 

We have audited, in accordance with generally acce^d auditing standards, the financial statements 
■ ended dated i:] 

participate for g 

xyi^pai'ihM?§^en^ber 3%20xi^^ Wis sch^ule Is theresj^ management. 

' on ^Is schedule based on our audit^.?,^- 

We conducted our auditofthe schedule in accordance with auditing standards generally accepted 
in the United States of America.Those standards require that we plan and perform the audit to 
obtain reasonable assurance about whether the schedule of profit participation is free of material 
misstatement Anaudit includes examining, on a test basis, evidence supporting the amounts and 
disclosures in the schedule. An audit also includes assessing the accounting principles used and 
significant estimates made by management, as wejl as evaluating the overall schedule presentation. . 

We believe that our audit provides a reasonable basis for our opinion. 

W6 have been informed that the documents that govern the determination of Reed Srhith's profit 
participation are (a) the employment agreement between Reed Smith and XYZ Company dated 
February 1,20X0, (b) the production and distribution agreement between XYZ Company and 
Television Network Incorporated dated March 1,20X0, and (c) the studio facilities agreement between 
XYZ Cprripany for the year ended December 31,20X1, in accordance with the provisions of the 
agreements referred to above. 

in our opinion, the schedule of profit participation referred to above presents fairly, in all material 
respects, Reed Smith's participation In the profits of XYZ Company for the year ended December 31 
2GXU, in accordance with the provisions of the agreements referred to above. 

This fepprtls intended solely for the Information and use of theboard of directors and management bf; 
XYZ Gorripany and Reed Smith and should not be used for any other purpose. 


Note 

Notice that since the object of this report is "profit participation" (a bottom-line concept), the auditor also must have 
audited the eniireincome statement and make reference to the related audit repj5rt. 








Independent Accountant's Review Report 

[Appropriate Addressee! 

I (We) have reviewed the accompanying financial statements ofXYZ Company, which comprise the 
balance sheets as of December 31,20X2 and 20X1, and the related statements of income, changes in 
stpCkhoJders' equity, and cash flows for the years then ended, and the related notes to the financial 
statements^ Areview includes primarily applying analytical procedures to management's (owners') 
Vflnah^^^ and making inquiries of company management (owners). A review Is substantially less 
in scope than an audit, the objective of which is the expression of an opinion regarding theflnahcial 
statements as a whole. Accordingly, 1 (we) do not express such an opinion. 

Management's Responsibility for the Financial Statements 

Management (Owners) is (are) responsible for the preparation and fair presentation of these financial 
statements in accordance with accounting principles generally accepted In the United States of 
America; this includes the design, implementation, and maintenance of internal control relevant to 
the preparation and fair presentation of financial statements that are free from material misstatement 
whether due to fraud or error. 

Accountant's Responsibility 

My (Our) responsibility is to conduct the review engagements In accordance with Statements on 
Standards for Accounting and Review Services promulgated by the Accounting and Review Services 
; Committee of the AlCPA. Those standards require me (us) to perform procedures to obtain limited 
i assurance as a basis for reporting whether I am (we are) aware of any material modifications that 
I should be made to the financial statements for them to be in accordance with accounting principles 
I generally accepted in the United States of America. I (We) believe that the results of my (our) 

I procedures provide a reasonable basis for our conclusion. 

I Accountant's Conclusion 

j 

Based on my (our) reviews, I am (we are) not aware of any materjal modifications that should be made , 
to the accompanying financial statements in order for them to be in accordance with accounting 
principles generally accepted in the United States of Ai^erica. 

[Signature of accounting firm or accountant, as appropriate] 

[Accountant's city and state] . - 

[Date ofthe accountant's report] ' 
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Accountant's Compitation Report 

Management is responsible for the accompanyiRg-finandal statements of XYZ Company, which 
comprise the balance sheets as of December 31> 20Xl;;ahd 20X2^nd the related statements of income, 
changes in stockholders'equity, and cash flows fortheyearStbWpnd and the related notes to 

the financial statements in accordance with accounting principles generally accepted in the United 
States of America. I (We) have performed compilation engagements In accordance with Statements on 
Standards for Accounting and Review Services promulgated by the Accounting and Review Services 
Committee of the AlCPA. I (We) did not audit or review the financial statements nor was (were) 1 
(we) required to perform any procedures to verify the accuracy or completeness of the information 
provided by management Accordingly, 1 (we) do not express an Opinion, a conclusion, nor provide any 
form ofassurance on these financial statements. r 

(Signature ofaccounting firm oraccountant, as appropriate) ' 

(Accountant's city and state) 

(Date of the accountant's report) A / ' 


Individual Sentences: 

1,.; Management is responsible for the accompanying financial statements of XYZ Company, which 
comprise the balance sheets as of December 31,20X1 and 20X2 and the related statements of 
income, changers in stockholders'equity, and cash flows for the years then ended, and the related 
notes to the financial statements In accordance with accounting principles generally accepted in 
the United States of America. 

2. I (We) have performed compilation engagements in accordance with Statements on Standards for 
Accounting and Review Services promulgated by the Accounting and Review Services Committee . 
of the AlCPA. 

3. I (We) did not audit or review the financial statements nor was (were) 1 (we) required to 
perform any procedures to verify the accuracy or completeness of the information provided by 
management. 

4. Accordingly, I (we) do not express an opinion, axondusioh, nor provide any form of assurance on 
these firiartcialstatements. 








Separate 
(No Insta 





Independent Auditor's Report 

(Appropriate •■■■,■ 

MiWe have audited, in accordance with auditing standards generally.accepted inthe UnitedStates of. 

America, the financia l staternehts of XVZ Company, Which'comprise the balance sheet as of December 31, 
g 20X2, and the related statements of income, changes in stockholders'equity, and cash flows, for the 
s year then ended, and the related notes to the finanelaislatements, and have issued our report thereon 
dated February 16,20X3. fiSii 

In connection with our audit, nothing came.to our attention that caused us to believe that XYZ . 
Company faijed to comply with the terms, covenants, provisionsi or conditi.ons of sections XX to YY, 
inclusive, of the Indenture dated July 21,20X0, with ABC Bank, insofar as they relate to accounting 
matters. However, our audit was not-directed primarily toward obtaining knowledge of such , : 
noncompliance. Accordingly, had we performed additional procedures, other matters may have 
come to our attention regarding the Company's noncompliance with theaboverreferenced terms, . 
covenants, provisions, or conditions of the Indenture, Insofar as they relate to accounting matters.. 

This report is intended solely for the information and use of the board of directors and management of. 
XYZ Company and ABC Bank and is not intended to be and should not be used by anyone other than 
these specified parties. . • 

(Auditor's signature) 

(Auditer's .dlty;and StateJV' 

(pate of theauditdr's report) 
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Separate Report 
{with Noncompli 



IndepfendenitAudltor^s Report 

I (Appropriate Addressee) 

' VVe have audited; in accordance with auditing standards generally accepted in the United States of 
America, the fInaiiciaistatGments.ofXYZ Gornpany; which comprise the balance sheet as of December 
31,20X2> and the related statements of income, changes in stockholders' equity, and cash flows for the 
. year then ended, and the related notes to the financial statements, and have issued our report thereon 
";-dated-IVlarcft;5;20X3.' '';' ■ ■■' 

in connection with our audit, we noted that XYZ Company failed to ebmply With the "Working Capital" 
provision of section XX of the Loan Agreement dated March .1 ,„2GX2, with ABC Bank. Our audit was not 
directed primarily toward obtaining knowledge as to whether XYZ Company failed to comply with 
the terms, covenants, provisions, or^dhdltions of sections XX to YY, inclusi ve, of the Loan Agreement, 
Insofar as they relate to accounting matters. Accordingly, had we performed additional procedures, 
other matters may have come to our attention regarding noncompliance with the above-referenced 
terms, covenants, provisions, or conditions of the Loan Agreement, insofar as they relate to accounting v 
matters. 

This report is intended solely for the information and use of the board of directors and management of 
XYZ Company and ABC Bank and is not intended to be and should not be used by anyone other than ^ 
these specified parties. 

(AUditorVsignature) ^ ^/ 

(Auditor's city and state) 

(Date of the auditor's report) 
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independent Auditor's Report 

(Appropriate Addressee) 

We have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20X1, and the related statements of income, changes in 
stdckhoidets'equity, and cash flows for the year then ended, and the related notes to the financial 
statements. 

Management's Responsibility for the Financial Statements 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementatioruand maintenance of internal control relevant to the preparation 
and fair presentation of financial statements that are free from material misstatement, whether due to 
fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on our audit. We 
conducted our audit in accordance with auditing standards generally accepted in the United States of 
America. Those standards require that we plan and perform the audit to obtain reasonable assurance 
about whether the financial statements are free from material misstatement. 

An audit involves performing procedures to obtain audit evidence about the amounts and disclosures 
in the financial statements. The procedures selected depend on the auditor's judgment, Including the 
assessment of the risks of material misstatement of the financial statements, whether due to fraud or 
error. In making those risk assessments, the auditor considers internal control relevant to the entity's 
preparation and fair presentation of the financial statements in order to design audit procedures 
that are appropriate In the circumstances, but not for the purpose of expressing an opinion on the 
effectiveness of the entity's interna! control. Accordingly, we express no such opinion. An audit also 
Includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as well'^s evaluating the overall presentation 
ofthe financial statements. 

We believe that the audit evidence we have obtained,is Sufficient and appropriate to provide a basis 
for our audit opinion. 

Opinion - < - 

In our opinion, the financial statements referred to aboVe'present fairly, in ali materia! respects, the 
financial position of ABC Company as of December 31,20X1, and the results of its operations and its 
cash flows for the year then ended In accordance with accounting principles generally accepted in the 
United States of America. 

Other Matter 

In connection with our audit, nothing came to pur attention that caused us to believe that ABC 
Company failed to comply with the terms, covenants, provisions, or conditions of sections XX to YY, 
inclusive, of the Indenture dated July 21 ,20X0 with XYZ Bank, Insofar as they relate to accounting 
matters. However, our audit was not directed primarily toward obtaining knowledge of such 
noncompliance. Accordingly, had we performed additional procedures, other matters may have 
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to our attention regarding the C oinpi ny iuiik onipii inci with thi . 

COvenamSf provisions, or conditions of the liKK>'itn( insofuasiluytelai k ' uu i ■ 

Bf trteted Um Relating to the Other Matter 


y^'te.^nvnunicatfon reiat* i to compliance wnh tli ^ afuK mentioned Indenture i' u n 
j^t^JiHai^paragraphi* intendedsolelytorthoinfoimiiionanduseoftheboi I-* i h 
-J^^Sn^err^OntofABCCon panyandXYZBank mdrnoMntendedtobeandsho iin i ' un 
than these* ;ecified parties 

'<j^($OI^^ignature) 

>'d ' 


rectors an 


(Date of the auditor's report) 
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Other Profes: 



AICPA on Reporting on Interna 




After studying this lesson, you should be able to: 

1. Understand the auditor's responsibilities when reporting on Internal control over financial reporting 
in an integrated audit of a non-issuer's finahclai sfetements in accordance with AlCPA Professional 
Standards. ..... 

2. , FaNlianzeyourself with the structure of die internal contraroyer financial importing for 

sfe an engagement, whether the report is issued separately or cornbined with the audit report bn the- ^ 
feiimentity's financial statements. .. ' 


I. Appikability and Objectives 

A, Applicability —This guidance applies when an auditor is engaged 
to audit internal control over financial reporting (ICFR) along with an 
audit of a nonissuer's financial statements, known as an integrated 
audit.The AiCPA issued a Statement on Auditing Standards to replace 
the guidance that was previously included among the Statements on 
Standards for Attestation Engagements. The AICPA guidance Is closely 
aligned with the corresponding PCAOB Auditing Standards applicable 
to an integrated audit of an issuer. 

B. Objectives —^There are two objectives: (1) To obtain reasonable 
assurance whether material weaknesses exist at the "as of" date in 
management's assessment of ICFR; and (2) to express an opinion 
on the effectiveness of ICFR and communicate appropriately with 
management and those charged with governance. 


Note 

'The AICPA Issued 
SfGfemenf on ^ 

Stondords f54Sj Wo;,73^;: 
■An AMdlipf intemai 

■jRe^drtihsi 

Integrated with an Audit 

was issued. SAS 130 h 
effective for integrated 
audits for periods ending : 
oriorvfterDec&r\befi0 
^ 16 . 


11. Underlying Concepts 

A. If any (one or more) "material weaknesses"exist, then the entity's internal control cannot be 
considered effective. The auditor should plan and perform the audit of ICFR to obtain sufficient 
appropriate evidence to provide reasonable assurance whether material weaknesses exist as of 
the date specified by management's report. 

B. The auditor is not required to search for deficiencies that are less severe than a material weakness 
(such as significant deficiencies or other lesser matters). "' 

C. The auditor should use the same suitable and available cbntrol criteria to perform the audit of 
ICFR that management uses for its assessment of the effectiveness of ICFR. 

D. Preconditions for the Audit of ICFR: 


1. Management mustacceptresponsibilityfortheeffectivenessof ICFR. 

2. Management must provide the auditor with an assessment of ICFR using suitable and 
available criteria (e.g., COSO's Internal Control-Integrated Framework). 

3. Management must support its assessment of ICFR with sufficient documentation. 

4. Management must provide its written assessment about the effectiveness of ICFR in a 
report that accompanies the auditor's report. {If management refuses to furnish a written 
assessment, the auditor should withdraw from the audit of ICFR.) 
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The Auditor's Basic Responsibilities—The auditor should plan and perform the integrated audit 
to achieve the objectives of both engagements simultaneously; that is, design the tests of control 
tod) obtain sufficient appropriate evidence to support the auditor's opinion on ICFRat the "as 
of" date in management's report; and (2) obtain sufficient appropriate evidence to support the 
auditor's control risk assessments for purposes of the audit of the financial statements. 


A. Risk Assessment, in General—The auditor should use the same risk assessment process to focus 
attention on the areas of highest risk in the audit of ICFR and the audit of the entity's financial 
statements. 

B. Fraud Risk Assessment— The auditor should evaluate whether the entity's controls adequately 
address the risks of materia! misstatement due to fraud as well as the risk of management override 
of controls. 

C. Entities with Multiple Locations— The auditor should assess the risk of material misstatement 
associated with the various locations/business units and correlate the amount of work with the 
degree of risk. 

D. Materiality— The auditor should use the same materiality for the audit of ICFR and for the audit of 
the entity's financial statements. 

E. Using the Work of Internal Auditors or Others— The auditor should assess the competence 
and objectivity of persons when planning to use them either (1) to obtain audit evidence or 

(2) to provide direct assistance in the audit of ICFR. (The need for the auditor to perform the work 
increases as the risk associated with a control increases.) 

F. Scaling the Audit— The size and complexity of the entity, its business processes, and the business 
units may affect the way in which the entity achieves its control objectives. (Less control testing 
may be needed for smaller, less complex entities.) 

G. Use a "Top-Down Approach" —^The auditor should (1) begin at the financial statement level; 

(2) use the auditor's understanding of the overall risks to internal control; (3) focus on "entity- 
level controls" (e.g., the control environment, the entity's risk assessment process, monitoring 
controls, etc.); (4) focus on significant classes of transactions, accounts, disclosures, and relevant 
assertions that have a reasonable possibility of material misstatement to the financial statements; 
(5) verify the auditor's understanding of the risks in the entity's processes (includes performing 
walkthroughs); and (6) select controls for testing based on the assessed risk of material 
misstatement to each relevant assertion. 

IV. Testing Controls and Evaluating Identified Deficiencies— The evidence that should be obtained 

increases with the risk of the control being tested. (The objective is to express an opinion on ICFR 

overall, not on the effectiveness of individual controls-.) 

A. Evaluating "Design Effectiveness"— Procedures include a mix of inquiry, observation of the 

entity's operations, and inspection of relevant documentation. (A walkthrough is usually sufficient 
to evaluate design effectiveness.) ' 

B. Testing "Operating Effectiveness" —Pro'cedufes include a mix of inquiry, observation of the 
entity's operations, inspection of relevant documentation, recalculation, and reperformance of 
the control. (Note that these procedures are presented in order of increasing persuasiveness of 
the resulting evidence.) Inquiry alone is insufficient for evaluating the operating effectiveness of 
controls. 

C. The Severity of a Deficiency —Depends on the magnitude of the potential misstatement and 
the degree of likelihood (whether there is a "reasonable possibility") of a failure; it does not require 
that an actual misstatement occur. 

D. Risk Factors Affecting whether a Misstatement may Occur—(1) The size and composition of 
the account; (2) susceptibility to misstatement; (3) volume of activity and complexity; (4) nature 
of the account, transactions, or disclosure; (5) accounting and reporting complexities associated 
with the account, transactions, or disclosures; (6) exposure to losses in the account; (7) possibility 
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of significant contingent liabilities resulting; (8) existence of related party transactions; and 
(9) changes from the prior period. 

1. Multiple Deficiencies—May cause a material weakness even though the deficiencies individually 
may be less severe. 

F. Compensating Controls—May mitigate the severity of a deficiency, although they do not 
eliminate the deficiency entirely. 

G. Indicators of Material Weaknesses—(1) Discovery of any fraud involving senior management, 
whether material or not; (2) restatement of previously Issued financial statements to correct a 
material misstatement; (3} identification of any material misstatement during the audit that was 
not detected by internal control; and (4) ineffective oversight of reporting and controls by those 
charged with governance. 


A. Review Reports of Other Parties —^The auditor should review the reports of others {such as 

internal auditors) during the period that address internal control issues. 

B. Obtain written representations from management specific to the audit of ICFR; management's 

failure to provide these representations is a scope limitation. 

C. Communicate Certain Internal Control Matters identified during the Integrated Audit. 

1. Communicating materia! weaknesses and significant deficiencies— Should be 
communicated in writing to those charged with governance and management by the report 
release date. (For governmental entities only, the written communication must occur within 
60 days of the report release date.) 

2. Communicating other lesser deficiencies —Should be communicated in writing to 
management within 60 days of the report release date; should also inform those charged with 
governance of that communication. 

3. Communicating an absence of deficiencies— The auditor should not Issue any report 
stating that"no material weaknesses"(or no deficiencies less severe than a material weakness) 
were identified in an audit of ICFR. 

VI. Reporting on ICFR 

A. The Auditor's Written Report on ICFR Should include the Following Elements; 

1. A title that includes the word "independent"; 

2. An addressee; 

3. An introductory paragraph that (a) idehtifies.^he entity involved; (b) states that ICFR has been 
audited; (c) identifies the "as of"date; and (d) Identifies the criteria used to evaluate ICFR; 

4. A section labeled "Management's Responsibility for-[ICFR]"that (a) states that management is 
responsible for ICFR; (b) states that management Is responsible for its assessment about the 
effectiveness of ICFR; and (c) refers to mahag^ethent's report on ICFR; 

5. A section labeled "Auditor's Responsibility"that (a) states that the auditor's responsibility is to 
express an opinion on the entity's ICFR; (b) states that the audit was conducted in accordance 
with [GAAS]; (c) states that such standards require that the auditor plan and perform the audit 
to obtain reasonable assurance about whether effective ICFR was maintained in all material 
respects; (d) describes the audit; and (e) states the auditor's belief that the evidence obtained 
is sufficient and appropriate as a basis for the opinion; 

6. A section labeled "Definition and Inherent Limitations of [lCFR]"that (a) defines ICFR (using the 
same description as used in management's report); and (b) includes a paragraph commenting 
on the inherent limitations of Internal control; 

7. A section labeled "Opinion"that expresses the auditor's opinion on whether the entity 
maintained, in ail material respects, effective ICFR as of the specified date, based on the 
criteria used; 
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8. Cross reference—the auditor may issue a separate report on ICFR and on the entity's 
financial statements, or the auditor may issue a combined report on both. If the auditor issues 
a separate report on ICFR, the auditor should include an other-matter paragraph that cross 
references the separate audit report on the financial statements (and vice versa); 

9. The manual or printed signature of the auditor's firm; 

10. The city and state where the auditor practices; and 

11. The date of the auditor’s report; 

B. Report Date—The auditor's report on ICFR should not be dated before the auditor has obtained 
sufficient appropriate audit evidence to support the auditor's opinion, Including evidence that 
the audit documentation has been reviewed; the audit reports on ICFR and on the financial 
statements should have the same date. 

C. Five Reasons to Modify the Auditor's Report on ICFR 

1. Adverse opinion issued—When there is at least one material weakness, the report should 
include the definition of "material weakness"and reference the description in management's 
report or point out that management's report did not identify the matter; the report also 
should determine the effect on the audit of the entity's financial statements (state whether 
the opinion on the financial statements was affected by adding an other-matter paragraph or 
commenting in the paragraph that identifies the material weakness). 

2. Elements of management's report are incomplete or Improperly presented—if 

management does not revise its report, the auditor should add an other-matter paragraph 
to describe the reasons for the determination that elements of the report are incomplete or 
improperly presented. 

3. Scope limitations—The auditor should either withdraw from the engagement or disclaim an 
opinion on ICFR (stating the reasons for the disclaimer) and consider the effect on the audit of 
financial statements. 

4. Making reference to a component auditor—The auditor should not make such a reference 
unless the component auditor has followed appropriate professional standards and has 
issued a report on a component's ICFR that is not restricted. 

5. Management's report includes additional information—^The auditor should add an 
other-matter paragraph to disclaim an opinion on the other information In management's 
report; if such other information is included in a document containing management's report, 
the auditor should read the additional information tb evaluate whether there,are material 
inconsistencies with management's report. (If there are, the auditor should try to persuade 
management to make appropriate changes^ resolve any inconsistency.) 

VII. Sample Reports That Follow 

A. Example of a management report (with no material weaknesses reported) 

B. Auditor's unmodified opinion on an entity's,financial statements and ICFR (presented as a 
combined report on both parts of the Integrated audit) 

C. Auditor's unmodified opinion on ICFR (presented as a separate report on ICFR) 

D. Auditor's adverse opinion on ICFR (presented as a separate report on ICFR) 
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Management's Report on internal Control Over Financial Reporting 


ABC Company's internal control over financial reporting is a process effected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding 
the preparation of reliable financial statements In accordance with [applicable fmanciat reporting 
framework, such as accounting principles generally accepted in the Vnited States of Amerkdji An entity’s 
internal control over financial reporting includes those policies and procedures that: {1) pertain to the 
maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and y 
disposltioKs of tbe assets of the entity; (2) provide reasonable assurance that transactions are recorded 
as necessary to permit preparation of financial statements in accordance with [app//cub/e ivnanc/c?/ ^ ^ 

; reporting framework, such as accounting principles generally accepted in the United States of America] and 
that receipts and expenditures of the entity are being made only in accordance with authorizations 
of management and those charged with governance; and (3) provide reasonable assurance regarding 
prevention, or timely detection and correction, of unauthorized acquisition, use, or disposition of the 
entity's assets that could have a material effect on the financial statements. 

Management of ABC Company is responsible for designing, implementing> and maintaining effective 
internal control over financial reporting. Management assessed the effectiveness of ABC Company's 
internal control over financial reporting as of December 31,20XX, based on [identifycriteria]. Based 
on that assessment, management concluded that, as of December 31,20XX, ABC Company's internal 
control over financial reporting is effective, based on [identifycriteria]. 

Interna! control over financial reporting has inherent limitations. Internal control over financial 
reporting Is a process that involves human diligence and compliance and is subject to lapses in 
Judgment and breakdowns resulting from human failures. Internal control over financial reporting 
also can be circumvented by collusion or improper management override. Because of its inherent 
limitations; internal control over financial reporting may not prevent, or detect and correct, 

I misstatements. Also, projections of any assessment of effectiveness to future periods are subject to 
I the risk that controls may become inadequate because of changes in conditions or that the degree of 
I compliance with the policies or procedures may deteriorate. 

; ABC Company 

[Report signers, if applicable] ' 

[Date] „ . - , 

Unmodified Opinions on Financial Statements an^ICFR (Combined Report) 

[Appropriate Addressee] ... 

Report on internai Control Over Financial Reporting 

We have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20XX, and the related Statements of income, changes in 
stockholders'equity, and cash flows for the year then ended, and the related notes to the financial 
statements. We have also audited ABC Company's Internal control over financial reporting as of 
December 31,20XX, based on [/c/enfijycr/fer/o]. 


401 







Forming Conclusions and Reporting 


Management's Responsibility for the Financial Statements and Internal Control Over 
Financial Reporting 

Mahagement is responsible for the preparation and fair presentation of these financia! statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design. Implementation, and maintenance of effective internal control over financial 
reportiiig relevant to the preparation and fair presentation of financial statements that are free 
from material misstatement, whether due to fraud or error. Management is also responsible for 
Its assessment about the effectiveness of Internal control over financial reporting/included in the 
accompanying [titte of management's report]. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements and an opinion on the entity's 
internal control over financial reporting based on our audits. We conducted our audits in accordance r 
with auditing standards generally accepted in the United States of America. Those standards require 
that we plan and perform the audits to obtain reasonable assurance about whether the financial 
statements are free from materialmisstaternentand whether effective internal control overfinancial 
reporting was maintained In all material respects. 

An audit of financial statements involves performing procedures to obtain audit evidence about the 
amounts and disclosures in the financial statements.The pfocedures selected depend on the auditor's 
judgment, including the assessment of the risks of material misstatement of the financial statements, 
whether due to fraud or error. In making those risk assessments, the auditor considers interna! control 
relevant to the entity's preparation and fair presentation ofthe financial statements In orderto 
design audit procedures that are appropriate in the circumstances. An audit of financial statements >■ 
also includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management, as weli as evaluating the overall presentation 
of the financial statements. 

An audit of internal control over financial reporting involves performing procedures to obtain audit 
evidence about whether a material weakness exists.The procedures selected depend on the auditor's : | 
Judgment, including the assessment ofthe risks that a materia! weakness exists. An audit includes 
obtaining an understanding of internal control over financial reporting and testing and evaluating | 
the design and operating effectiveness of Internal control over financial reporting based on the 
assessed risk. : : 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinions. - . 

Definition and Inherent Limitations of Internal ControlOver Financial Reporting 

An entity's internal control over financial reporting Is a process effected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding ; 
the preparation of reliable financial statements in accordance with [applicable financial reporting : 
framework, such as accounting principles generally accepted in the United States of America], An entity's v 
internaleontrol overfinancial reporting includes those policies and procedures that (1) pertain to the/^ 
maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and 
dispositions of the assets ofthe entity; (2) provide reasonable assurance that transactions are recorded: 
as necessary to permit preparation of financial statements In accordance with [upp//cod/e finunc/a/ : 
reporting framework, such os accounting principles generally accepted in the United States of America] and 
that receipts and expenditures of the entity are being made only in accordance with authorizations 
of management and those charged with governance; and (3) provide reasonable assurance regarding 
prevention, or timely detection and correction of unauthorized acquisition, use, or disposition ofthe 
entity's assets that could have a material effect on the financial statements. 
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Because of its inherent limitations, internal control oyer financial reporting may not prevent, or detect 
and correct, ntisstatements. Also, projections of any as^sment of effectiveness to future periods are 
subject to the risk that controls may become Inadequate because of changes in conditions or that the 
degree of compliance with the policies or procedures may. deteriorate. 

Opinions 

In our opinion, the financial statements referred to above present fairly, in all material respects, the 
financial position of ABC Company as of December 31,20XX, and the results of its operations and its 
cash flows for the year then ended in accordance with [applicable financial reporting framework, such 
gsdccbunting principles generally accepted in the United States of America]. Also, In our opinion, ABC 
: Company maintained, in all material respects, effective Internal control over financial reporting as of 
December 31,20XX, based on 

Report on Other Legal and Regulatory Requirements 

[form and content of this section of the auditor's report will vary depending on the nature of the auditor's 
otherreporting responsibiiities.] 

[Auditor's signature] 

I [Auditor's city and state] 

\ [Dateofthe auditor's report] 


Unmodified Opinion on tCFR (Separate Report on ICFR) 

[Appropriate Addressee] 

Report on Internal Control Over Financial Reporting 

We have audited ABC Company's internal control over financial reporting as of December 31,20XX, 
based on [Identifycriteria]. 

Management's Responsibility for Internal Control:Over Financial Reporting 

Management is responsible for designing, implementing,,and rriaintaining effective internal control > 
over financial reporting and for its assessment abouUhe e^eetlveness of internal control over financial 
reporting, included in the accompanying [f/f/e ofmdnpgemenf's report]. 

Auditor's Responsibility 

Our responsibility is to express an opinion on the entity's Internal control over financial reporting 
based on our audit. We conducted our audit In accordance with auditing standards generally accepted 
In the United States of America. Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether effective internal control over financial reporting was maintained 
In a!i material respects. 
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An audit of internal control over involves performing procedures to obtain audit 

evidence about whether a material weakness exists. Hieprocedures selected depend on the auditor's 
' judgment, including the assessment of the risks thata material weakness exists. An audit includes 
Obtaining an understanding of internal control over financial reporting and testing and evaluating 
thedesign and operating effectiveness of Internal control oyer financial reporting based on the 
assessed risk. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinion. 

Definition and inherent Umitations of Internal Control Over Financial Reporting 

An entity's internal control over financial reporting is a process effected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding 
the preparation of reliable financial statements in accordance with [applicable financial reporting 
framework, such as accounting principles generally accepted in the United States of America]. An entity's 
internal control over financial reporting Includes those policies and procedures that (1) pertain to 
the maintenance of records that, reasonable detail, accurately and fairly reflect the transactions 
and dispositions of the assets of the entity; (2) provide reasonable assurance that transactions are 
recorded as necessary to permit preparation of financial statements in accordance with [applicable 
financial reporting framework, such as accounting principles generally accepted in the United States of 
America], and that receipts and expenditures of the entity are being made only in accordance with 
authorizations of management and those charged with governance; and (3) provide reasonable 
assurance regarding prevention, or timely detection and correction of unauthorized acquisition, use, 
or disposition of the entity's assets that could have a material effect on the financial statements. 

Because of its inherent limitations, interna! control over financial reporting may not prevent, or detect 
and correct, misstatements. Also, projections of any assessment of effectiveness to future periods are 
subject to the risk that controls may become Inadequate because of changes in conditions, or that the , 
degree of compliance with the policies or procedures may deteriorate. 

Opinion 

In our opinion, ABC Company maintained, in all material respects, effective internal control over 
financial reporting as of December 31,20XX, based on [identify criteria]. 

Report on Financial Statements 

We also have audited, in accordance with auditing standards generally accepted in the United States 
of America, the [identify financial statements] of ABC Company, and our report dated [date of report, 
which should be the same as the date of the report on the audit.oflCFR] expressed [include nature of 
opinion]. ' .. ; 

Report on Other Legal and Regulatory Requireroehts 

[Form and content of this section of the auditor's report will vary depending on the nature of the auditor's 
other reporting responsibilities.] 

[Auditor^ signature] 

[Auditor's city and state] 

[Dote of the auditor's report] 
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Adverse Opinion on ICFR (Separate Report on ICFR) 

. [Appropriate Addressee] 

Report on Internal Control Over Financial Reporting 

We have audited ABC Company's internal control over financial reporting as of December 31,20XX, 
based on [/dent/^cr/ter/a]. 

Management's Responsibility for Internal Control Over Financial Reporting 

Management Is responsible for designing, implementing, and maintaining effective interna! control 
over financial reporting and for its assessment about the effectiveness of internal control over financial 
reporting, included in the accompanying [title of management's report]. 

Auditor's Responsibility 

I Our responsibility is to express an opinion on the entity's internal control over financial reporting 
based on our audit. We conducted our audit in accordance with auditing standards generally accepted 
in the United States of America. Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether effective Internal control over financial reporting was maintained 
in all material respects. 

An audit of internal control over financial reporting involves performing procedures to obtain audit 
evidence about whether a material weakness exists.The procedures selected depend on the auditor's 
judgment, including the assessment of the risks that a material weakness exists. An audit includes 
obtaining an understanding of internal control overfinandal reporting and testing and evaluating 
the design and operating effectiveness of internal control over financial reporting based on the 
assessed risk. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our adverse audit opinion. 

Definition and Inherent Limitations of Internal Control Over Financial Reporting 

An entity's internal control over financial reporting is a proces§^}fected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding 
the preparation of reliable financial statements in accordance with [applicable financial reporting 
framework, such as accounting principles generally accepted in the United States of America]. An entity's 
internal control over financial reporting includes those policies and procedures that (1) pertain to the 
maintenance of records that, in reasonable detail, accurately^nd fairly reflect the transactions and 
dispositions of the assets of the entity; (2) provide reaspnableassurance that transactions are recorded 
as necessary to permit preparation of financial statements iri accordance with [applicable financial 
reporting framework, such os accounting principles generally accepted in the United States of America] and 
that receipts and expenditures of the entity are being made only in accordance with authorizations 
Of management and those charged with governance; and (3) provide reasonable assurance regarding 
prevention, or timely detection and correction, of unauthorized acquisition, use, or disposition of the 
entity's assets that could have a material effect on the financial statements. 

Because of its inherent limitations, internal control over financial reporting may not prevent, or detect 
and correct, misstatements. Also, projections of any assessment of effectiveness to future periods are 
subject to the risk that controls may become inadequate because of changes in conditions, or that the 
degree of compliance with the policies or procedures may deteriorate. 
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A material weakness is a deficiency, or a GOnfibJhatiph of <|^.cterides, In internal cpntrpioyer fina^^^ 
reporting.suchthatthereisa reasonable possifeiliiy that a tdatoriai misstatement of the entrt^^^ 
financial statements will not be prevented, of add coffbcted, on a tiradly basis. The following 

rhateriai weakness has been identified and IheludMihthe accornpanying If/tfe ofmanGgementi 


In our opinion, because of the effect of the material weakness described in the Basis for Adverse 
Opinion paragraph on the achievement of the objectives of (identliy..Grlteria], ABG Company has not 
maintained effective Internal control over financial reporting as of December 3T, 20XX, based on 
[identifycriteria]. : : ; V 


Report on Financial Statements 

We also have audited, in accordance with auditing standards generally accepted in the United States 
Of America, the [identify financial statements] of ABC Company, and our report dated [date of repo ft, 
which should be the same as the date of the report on the audit ofICFR] expressed [inciudehatufe^^of .: - 
opiriion]. We considered the material weakness identified above in determining the nature, timing, and. 
extent of audit procedures applied in our audit of the 20XX financial statements, and this repoft does . 
not affect such report on the financial statements. 


Report on Other Legal and Regulatory Requirements 

.[Form and content of this section of the auditor's report will vary depending on the nature of the auditor^ 
other reporting responsibilities.] 


[Auditor's,signature] 


[Auditor's city and state] 


[Date ofthe auditor's report] 









PCAOB on 
Integrated 


The AICPA issued Statement on Aiiditing#andards (SAS) No. ISttnAi/d/f ofOver 
financial Repofting thatjsiptegri3t€dwHhQnAu0qfFimncialStG^ents.Jh\^^^ 
integrated audits npnissuers {private c 6 rr)panlesj,atjd it makes the professlpha) reqi^feents under S : . 
the ACPA standards substantially the same as the requirements f 6 r:integr^ted?a«di^^ 5 suers unders:; 
\PGApBstandlrds.c. 

After studying this lesson, you should be able to: 

1. Understand the auditor's responsibilities when repbMhg bfi interna! cohtroi pyer financial re^ 

in an integrated auditof an Issuer^ finartcia^^tfetbeht^Maccoidance With PGAOS Auditing , JSSSS 
..^.....Standards, 

2. Familiarize yourself with the structure of the report on internal control over financial reporting for 

such an engagement, whether the report 'is issued separately or combined with the audit report bn 
the entity^ financial statenients. ^ igl? 


I. "An Audit of Internal Control Over Financial Reporting That Is Integrated with an Audit of 
Financial Statements" 

II. Applicability of Standard— When engaged to "perform an audit of management's assessment of the 
effectiveness of internal control over financial reporting" (ICFR), the objective of such an engagement 
is to express an opinion on the effectiveness of ICFR. 

III. Some Important Definitions 

A. Control Deficiency —When the design or operation of a control does not allow management 
or employees, in the normal course of performing their assigned functions, to prevent or detect 
misstatements on a timely basis. 

1. Deficiency In design— When a control necessary to meet the control objective is missing 
or when an existing control Is not properly designed so that, even if the control operates as 
designed, the control objective is not always met. 

2. Deficiency in operation —When a properly designed control does not operate as designed 
or when the person performing the control does not possess the necessary authority or 
qualifications to perform the control effectively. 

B. Material Weakness —A deficiency, or a combination of deficiencies, in ICFR such that there 
is a reasonable possibility that a material misstatement of the company's annual or interim 
financial statements will not be prevented or detected on a timely basis. (If one or more material 
weaknesses exist, the company's ICFR Is not considered tqbe effective.) 

C. Significant Deficiency —A deficiency, or a combination of-deficlencies, in ICFR that is less severe 
than a material weakness, yet important enough to merit attention by those responsible for 
oversight of the company's financial reporting. 

IV. Planning the Audit— The audit of ICFR should be integrated with the audit of the financial statements 
(i.e., the tests of controls should be designed to address both the objectives of the audit of ICFR and 
the audit of the financial statements). 

A. Role of Risk Assessment—"Risk assessment underlies the entire audit process described by 
this standard, including the determination of significant accounts and disclosures and relevant 
assertions, the selection of controls to test, and the determination of the evidence necessary for a 
given control." 

1. There is a direct relationship between the risk of material weakness and the amount of audit 
attention that is needed. 
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2. Materiality—Should use the same materiality considerations in planning the audit of ICFR as 
for the audit of the company's annual financial statements. 

B. Using the Work of Others—The auditor may use the work of others to reduce the work the 
auditor might otherwise have to perform. 

1. Includes internal auditors, other company personnel, service auditors (when a service 
organization is involved), and third parties working under the direction of management or the 
audit committee; the auditor should assess the competence and objectivity of those whose 
work the auditor plans to use. 

2. As the risk associated with a control increases, the auditor should take increasing 
responsibility for performing the work instead of using the work of others. 

V. Using a Top-Down Approach—Begins at the financial statement level and with the auditor's 

understanding of the overall risks to ICFR; the auditor then focuses on entity-level controls and works 

down to significant accounts and disclosures and their relevant assertions. 

A. Identifying Entity-Level Controls—The auditor must test those entity-level controls that are 
important to the conclusion about the effectiveness of ICFR. 

1. Entity-level controls-^ln'clude controls related to the control environment, controls over 
management override, the company's risk assessment process, controls to monitor results of 
operations or other controls, controls over the period-end financial reporting process; and 
policies that address significant business control and risk management practices. 

2. Control environment—Because of its importance to ICFR, the auditor must evaluate the 
control environment at the company. 

3. Period-end financial reporting process—Because of its importance to ICFR, the auditor 
must evaluate the period-end financial reporting process. 

B. Identifying Significant Accounts and Disclosures and their Relevant Assertions 

1. Relevant assertions—Those financial statement assertions that have a reasonable possibility 
of containing a material misstatement. (PCAOB auditing standards specifically refer to the 
following asertions (1} existence or occurrence; (2) completeness; (3) valuation or allocation; 

(4) rights and obligations; and (5) presentation and disclosure.) 

2. Risk factors—The auditor should consider risk factors relevant to the identification of significant 
accounts and disclosures and their relevant assertions, including the nature of the account or 
disclosure; size and composition of the account; susceptibility to misstatement, volume of activity 
and complexity of transactions; and changes from the prior period, among others. 

C. Understanding Likely Sources of Misstatement 

1. The auditor should achieve these control objectives—(a) Understand the flow of 
transactions related to the relevant assertions; (b) verify that the auditor has identified 
the points within the company's processes at which a material misstatement could arise; 

(c) identify the controls that management has implemented to address these potential 
misstatements; and (d) identify the cohtrolsthat management has implemented over the 
company's assets that could materially misstate the financial statements. 

2. Performing walkthroughs—Following a transaction from origination through the 
company's processes until reflected in the financial records is frequently the most effective 
way to achieve the objectives above. (Procedures usually include inquiry, observation, 
inspection of relevant documentation, and re-performance of controls.) 

D. Selecting Controls to Test—The auditor should test those controls that are important to the 
conclusion about whether the company's controls sufficiently address the assessed risk of 
misstatement to each relevant assertion. 
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VI. Testing Controls 

A. Nature of Tests of Controls (From least to most persuasive)—inquiry, observation, inspection of 
relevant documentation, and re-performance of a control: 

1. Testing design effectiveness—Procedures include Inquiry of appropriate personnel, 
observation of the company's operations, and inspection of relevant documentation {may be 
addressed by appropriate walkthroughs). 

2. Testing operating effectiveness—Procedures include inquiry of appropriate personnel, 
observation of the company's operations, inspection of relevant documentation, and re¬ 
performance of the control. 

B. Timing of Tests of Controls—^Testing controls over a greater period of time provides more 
evidence than testing over a shorter period of time; testing closer to the date of management's 
assessment provides more evidence than testing performed earlier in the year. 

C. Extent of Tests of Controls—^The more extensively a control is tested, the greater the evidence to 
evaluate the effectiveness of the control. 

D. Roll-Forward Procedures—When operating effectiveness has been tested at an interim date, the 
auditor should consider what.additional testing for the remaining period may be necessary. 

Vil. Evaluating Identified Deficiencies 

A. Basic Responsibility—The auditor must evaluate identified control deficiencies to determine 
whether, individually or in combination, they constitute material weaknesses as of the date of 
management’s assessment (based on whether there is a "reasonable possibility" that the controls will 
fail to prevent or detect a material misstatement, not whether a misstatement has actually occurred). 

B. Indicators of Material Weaknesses—Examples include (1) identification of fraud involving senior 
management (whether or not material); (2) restatement of previously issued financial statements; 
(3) identification by the auditor of a material misstatement of the financial statements in the 
current period; and (4) Ineffective oversight of the company's external financial reporting and 
internal control by the company's audit committee. 

C. Communicating Identified Deficiencies 

1. The auditor must communicate (in writing) all material weaknesses identified to 
management and the audit committee. 

2. The auditor must also communicate (in writing) other significant deficiencies Identified to 
the audit committee. 

3. The auditor should communicate (in writing) all other identified deficiencies in ICFR to 
management and inform the audit committee that such a communication has been made. 

4. If the auditor concludes that the audit committee's oversight of financial reporting and ICFR is 
ineffective, he or she must communicate that conclusion in writing to the board of directors. 

VIII.Reporting on Internal Control over Financial Reporting .. 

A. Separate or Combined Reports—Theauditormay choose to issue a combined report on the 
financial statements and on ICFR or separate reports. 

B. Title of report should include the word "independent" (e.g., "Report of Independent Registered 
Public Accounting Firm"). 

C. Combined Report—An unqualified report on the financial statements and on ICFR consists of five 
paragraphs; (1) introduction; (2) scope; (3) definition; (4) inherent limitations; and (5) opinion. 

D. Separate Reports—The auditor should add an additional paragraph to the audit report on the 
financial statements that references the report on ICFR; and the auditor should add an additional 
paragraph to the report on ICFR that references the audit report on the financial statements. 
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E. Report Date—If separate reports are issued, they should be dated the same (the date as of which 
the auditor has obtained sufficient competent evidence). 

F. If One (or More) Material Weakness Exists— The auditor must express an adverse opinion 
(unless there is a scope limitation). 

1. When expressing an adverse opinion— The auditor's report must include the definition of 
a material weakness and refer to management's assessment of the material weakness. (If not 
included in management's assessment, the auditor's report should state that fact.} 

2. Should determine the effect the adverse opinion on iCFR has on the opinion on the entity's 
financial statements. 

G. If There Is a Scope Limitation— The auditor should disclaim an opinion or withdraw from the 
engagement. 


Sample Report on the Effectiveness of Internal Control Over Financial Reporting 
Report of Independent Registered Public Accounting Firm 
Separate Audit Report on ICFR 

{Introductory paragraph) 

We have audited ABC Company’s internal control over financial reporting as of December 31,20X2, 
based on {Identify control cr/ter/a e.g., "criteria established in Internal Control—Integrated Framework 
issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO)'). ABC 
Company's management is responsible for maintaining effective internal control over financial 
reporting and for Its assessment of the effectiveness of internal control over financial reporting, 
included in the accompanying (title of management's report). Our responsibility is to express an opinion 
on the company's internal control over financial reporting based on our audit. 

(Scope paragraph) 

We conducted our audit in accordance with the standards of the Public Company Accounting 
Oversight Board {United States). Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether effective internal control over financial reporting was maintained 
in all material respects, Our audit of internal control overfinajidal reporting included obtaining an 
understanding of internal control over financial reporting, assessing the riskthat a material weakness 
exists, and testing and evaluating the design and operating effectiveness of internal control based 
on the assessed risk. Our audit also included performirig such other procedures as we considered 
necessary in the circumstances. We believe that our audit provides a reasonable basis for our opinion. 

(Definition paragraph) 

A company's internal control over financial repbrtipg.ts'a process designed to provide reasonable 
assurance regarding the reliability of financial reporting and the preparation of financial statements 
for external purposes in accordance with generally accepted accounting principles. A company's 
internal control over financial reporting includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions 
and dispositions of the assets of the company; (2) provide reasonable assurance that transactions 
are recorded as necessary to permit preparation of financial statements in accordance with generally 
accepted accounting principles, and that receipts and expenditures of the company are being made 
only In accordance with authorizations of management and directors of the company; and (3) provide 
reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or 
disposition of the company's assets that could have a material effect on the financial statements. 
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(Inherent limitations paragraph) 

Because of its inherent limitations, internal controt.over fiiiancial reporting may not prevent or detect 
misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the 
risk that controls may become inadequate because of changes Inconditlons, or that the degree of 
compliance with the policies or procedures may deteriorate. 

(Opinion paragraph) 

(n our opinion, ABC Company maintained. In all material respects, effective interna) control over 
financial reporting as of December 31,20X2, based on {identify control criteria, e.g., "criteria established 
in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizations of the 
Treadway Commission (COSO)”). 

(Explanatory paragraph) 

We have also audited, in accordance with the standards of the Public Company Accounting Oversight 
Board (United States), the {identify financial statements) of ABC Company and our report dated (date 
of report, which should be the same asTtie date of the report on the effectiveness of internal control over 
financial reporting) expressed {include nature of opinion). 

(Signature) 

(City and State or Country) 

(Date) 


Sample Combined Audit Report on Financial Statements and on the Effectiveness 
of Internal Control Over Financial Reporting 

Report of Independent Registered Public Accounting Firm 

(Introductory paragraph) 

We have audited the accompanying balance sheets of ABC Company as of December 31,20X2 and 
20X1, and the related statements of income, stockholders' equity-and comprehensive income, and 
cash flows for each of the years in the three-year period ended December 31,20X2. We have also 
audited ABC Company's internal control over financial reporting as of December 31,20X2, based 
on {Identify control criteria, e.g., "criteria established in Internal Control—Integrated Framework issued 
by the Committee of Sponsoring Organizations of theTreadway Commission (COSO)"). ABC Company's 
management is responsible for these financial statements, for.maintaining effective internal control 
over financial reporting, and for its assessment of the effectiveness of internal control over financial 
reporting, included in the accompanying (titleof managerneh't's report). Our responsibility Is to express 
an opinion on these financial statements and an opirHdh'on the company's internal control over 
financial reporting based on our audits. 

(Scope paragraph) ' 

We conducted our audits in accordance with the standards of the Public Company Accounting 
Oversight Board (United States). Those standards require that vye plan and perform the audits to 
obtain reasonable assurance about whether the financial statements are free of material misstatement 
and whether effective internal control over financial reporting was maintained in all material 
respects. Our audits of the financial statements Included examining, on a test basis, evidence 
supporting the amounts and disclosures in the financial statements, assessing the accounting 
principles used and significant estimates made by management^ and evaluating the overall financial 
statement presentation. Our audit of internal control over financial reporting Included obtaining an 
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understanding of intemai control over firrandal f^orting, assessing the risk that a 
exists, and testing and evaluating the desigrr and berating .effectiveness of internal control based 
on the assessed risk, Our audits also Included petfbimfng such other procedures as we consider^ 
necessary in the circumstances. We believe that ddraudits provide a reasonable basis for our bplnions, 

'(Definition paragraph): 

A company's internal control over financial reporting is a process designed to provide reasphabie 
assurance regarding the reliability of financial reporting and the preparation of financial staternents 
for external purposes in accordance with generally accepted accounting principles. Acompahy>S 
internal control over financial reporting includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail, accurately arid fairly reflect the transactions 
and dispositions of the assets of the company; (2) provide reasonable assurance that transactions 
are recorded as necessary to permit preparation of financial statements In accordance with generally 
accepted accounting principles, and that receipts and expenditures of the company are being made 
only in accordance with authorizations of management and directors of the company; and (3) provide 
reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or 
disposition of the company's assets ^that could have a material effect on the financial statements. 

(Inherent limitations paragraph) 

Because of its inherent limitations, interna! control over financial reporting may not prevent or detect 
misstatements. Also, projections of any evaluation of effectiveness to future periods aresubject to the . 
risk that controls may become inadequate because of changes In conditions, or that the degree of : 
compliance with the policies or procedures may deteriorate. . 

(Opinion paragraph) . 

In our opinion, the financial statements referred to above present fairly, in all material respects, 
the financial position of ABC Company as of December 31,20X2 and 20X1, and the results of its 
operations and its cash flows for each of the years in the three-year period ended December 31,20X2 
in conformity with accounting principles generally accepted In the United States of America. Also In 
our opinion, ABC Company maintained, in all material respects, effective Internal control over financial 
reporting as of December 31,20X2, based on (identify control criteria, for example, "criteria established :, 
in Internal Control—Integrated Framework issued by the Committee of Sponsoring Organizationsofthe 
Treadway Commission (COSO)"}. 

(Signature) 

(City and State or Country) ' ^ ^ 

/'(Date) ' ^ 
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Material Weakness Continues to Exist 


After studying this lessoi^ you should be able to 

1. Know the PCAOB reqtjemuui i ciuial yi auditons eng ^ J to report On whether a 
previously reported n^Wialv" ni'-sinii i lUontroloverfinai ^ il reporting continuesto e^ <> 

under Auditing ifdl'Jo A 

2. Know manager spe* I'lc responsibilities before an auditor can report on whether a previous 
reported mater ikrx ^ in internal control over financial reporting continues to exist 

3. Understandtl audltorsspecificresponsibilltieswhenreportingonwiu' In i n r ie| cited 
material weakn ^ss in internal control over financial reporting continut to t '-I'x 


I. "Reporting on Whether a Previously Reported Material Weakness Continues to Exist" 

II. Applicability —When engaged to report on whether a previously reported material weakness in 
internal control over financial reporting continues to exist as of a date specified by management. 

(The date specified by management must be a date after that of management's most recent annual 
assessment) PCAOB standards do not require reporting on whether a previously reported material 
weakness continues to exist, so such an engagement is voluntary. 

Mi. The Auditor's Objective —In an engagement to report on whether a previously reported material 
weakness continues to exist to express an opinion about the existence of a specifically identified 
material weakness as of a specified date (does not relate to the overall effectiveness of internal 
control over financial reporting); may report on more than one material weakness as part of the same 
engagement. 

IV. Conditions for Engagement Performance —Cannot report on whether a previously reported 
material weakness continues to exist unless all of the following are met: 

A. Management accepts responsibility for the effectiveness of internal control over financial 
reporting. 

B. Management evaluates the effectiveness of the specific control(s) that it believes addresses the 
material weakness using the same control criteria that management used for its most recent 
annual assessment of internal control over financial repor^g 5nd management's stated control 
objective(s). 

C. Management asserts that the specific controlfs) identified is (are) effective in achieving the stated 
control objective. 

D. Management supports its assertion with sufficient evidence, including documentation. 

E. Management presents a written report that will aceompar^y the auditor's report that contains all 

the elements required by the PCAOB: - ' 

1. Statement of management's responsibility for establishing and maintaining effective internal 
control over financial reporting; 

2. Statement identifying the control criteria used by management to conduct the required 
annual assessment of internal control; 

3. identification of the material weakness that was identified as part of management's annual 
assessment (or by the auditor's report on it); 

4. Identification of the control objectlve(s) addressed by the specified controls and a statement 
that the specified controls achieve the stated control objective(s) as of a specified date; and 

5. Statement that the identified material weakness no longer exists as of the specified date 
because the specified controls address the material weakness. 
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V. Performing the Engagement 

A. An individual material \weakness may be associated with a single stated control objective (or more 
than or)e)—A stated control objective \s the specific control objective identified by management 
that, If achieved, would result in the material weakness no longer existing. 

B. Auditor uses materiality at the financial-statement level, rather than at the individual account- 
balance level, in evaluating whether a material weakness exists. 

C. Obtaining an Understanding of internal Control over Financial Reporting 

1. The extensiveness of the required understanding of internal control increases with the 
pervasiveness of the effects of the material weakness. 

2. Must perform a walkthrough for all major classes oftransactions that are directly affected by 
controls specifically identified by management as addressing the material weakness—An 
auditor who has reported on interna! control in accordance with PCAOB auditing standards 
for the most recent annual assessment is not required to perform a walkthrough for this 
engagement. 

3. Successor auditors may determine that they are unable to obtain a sufficient basis for 
reporting on whether a previously reported material weakness continues to exist without 
performing a complete audit of internal control over financial reporting in accordance with 
PCAOB auditing standards. 

D. Testing and Evaluating Whether a Material Weakness Continues to Exist 

1. If management has not supported its assertion with sufficient evidence (a required condition) 
the auditor cannot complete this engagement. 

2. Auditor should evaluate the appropriateness of management's chosen date—for example, 
controls that operate daily and continuously can be as of almost any date of management's 
choosing; controls that operate over the company's period-end reporting process can usually 
only be tested in connection with a period-end. 

3. Auditor should obtain evidence about the effectiveness of all controls specifically identified 
in management's assertion (all controls that are necessary to achieve the stated control 
objective should be specifically identified and evaluated)—Determine whether the specified 
control operated as designed and whether the person performing the control possesses the 
authority and qualifications to perform the control effectively. 

E. Using the Work of Others— The auditor may consider the-work of others in deciding the 
nature, timing, or extent of the work that should be performed. (The auditor should perform any 
walkthroughs, however, because of the judgment involved.) 

F. Obtain Written Representations from Mana^^ement— About various matters (ranging from 
management's responsibility for establlshfng and maintaining internal control, management's 
evaluation of the effectiveness of the specified controls, describing any fraud issues, and stating 
whether there were material subsequent events, among other matters). 

VI. Auditor’s Report — On whether a previously-repotted material weakness continues to exist may only 

issue an unqualified opinion or a disclaimer of opinion (cannot issue a qualified opinion—any 

limitation on the scope precludes an expression of opinion). 

A. See the sample below for a continuing auditor who has previously reported on the company's 
internal control over financial reporting In accordance with PCAOB auditing standards as of the 
company's most recent year-end. 

B. Report Modifications—For any of the following conditions: 

1. Other material weaknesses that were reported previously by the company as part of the 
company's annual assessment of internal control are not addressed by the auditor's opinion. 

2. A significant subsequent event has occurred since the date reported on. 

3. Management’s report contains additional information—express a disclaimer of opinion on 
the additional information. 
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Sample Auditor’s Report for a Continuing Auditor Expressing an Opinion That a Previously 
Reported Material Weakness No Longer Exists 



We have previously audited and reported on management's annual assessment of XYZ Company’s 
internal control over financial reporting as of December 31,200X based on (identify control criteria, 

—integrated Framework issued by the Committee of Sponsoring 
Orgdhizations of the Treadway Commission (COSOjf) Our report, dated {date of report), identified the 
folldwing material weakness in the Company’s internal control over financial reporting: 

(Describe raaterlai weakness) 

we have audited management's assertion, included in the accompanying {title of management's report), 
that the material weakness in interna! control over financial reporting identified above no longer exists as 
of {date of management's assertion) because the following controlfs) addresses the material weakness: 

(Describe control(s)) 

Management has asserted that the contrdl{s) identified above achieves the following stated 
control objective, which is consistent with the criteria established in {identify control criteria used for 
management's annual assessment of internal control over financial reporting): {state control objective 
addressed). Management also has asserted that it has tested the controt(s) identified above and 
concluded that the contro!(s) was designed and operated effectively as of {date of management's 
\ assertion). XYZ Company's management Is responsible for its assertion. Our responsibility is to express 
: an opinion on whether the identified material weakness continues to exist as of {date of management's 
i assertion) based on our auditing procedures. 

Our engagement was conducted in accordance with the standards of the Public Company Accounting 
Oversight Board (United States). Those standards require that we plan and perform the engagement 
to obtain reasonable assurance about whether a previously reported material weakness continues 
to exist at the company. Our engagement included examining evidence supporting management's 
assertion and performing such other procedures as we considered necessary in the circumstances. We 
obtained an understanding of the company's Internal control over financial reporting as part of our 
previous audit of management's annual assessment of XYZ Company’s internal control over financial 
reporting as of December 31,200X and updated that understanding as it specifically relates to 
changes in internal control over financial reporting associated with the material weakness described 
above. We believe that our auditing procedures provide a reasonable basis for our opinion. 

In our opinion, the material weakness described above no longef exists as of {date of management's 
assertion). 

We were not engaged to and did not conduct an audit offnterna! control over financial reporting as 
of (date of monagemenf's osserf/on), the objective of which would be the expression of an opinion 
. on the effectiveness of Internal control over financial reporting-.'Accordingly, we do not express such 
an opinion. This means that we have not applied auditln.g^'roc^ures sufficient to reach conclusions 
about the effectiveness of any controls of the company a>;of any date after December 31,200X, other 
than the Gontroi(s) specifically identified In this report; Accordingly, we do not express an opinion that 
any other controls operated effectively after December 31,200X. . 

Because of its inherent limitations, internal control over financial reporting may not prevent or detect 
misstatements. Also, projections of any evaluation of the effectiveness of specific controls or internal 
control over financial reporting overall to future periods are subject to the risk that controls may 
become Inadequate because of changes in conditions or that the degree of compliance with the 
policies or procedures may deteriorate. 

(Signature) 

(City and State/or Country) 

-(Date) 
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After Studying this lesson, you should be able to: 

1/ Identify the two types of employee benefit plans that are associated with the Employee Retirement 
Income Security Act of 1974 (known as ERISA). - , 

Z ' identify the basic types of welfare plans and pension plans under ERISA. 

3. know when employee benefit plans are.generalfyrequired to be audited under ERISA, 

4. Knovy the circumstances that might permit a "limited-scope^ (instead of a "full-scope") audit 

> €ngagementfor an employee benefit plan. i 

5. 'know the structure of the auditor's report for a"iimited-scope"audit engagement of a pension plan. 


Employee benefit plans are a unique, technical subject matter for which extensive professional 
guidarice is available. Including the AlCPA's Audit and Accounting Guide, Employee Benefit Plans, 
which exceeds SOO pages. The purpose of this lesson is to introduce the fundamental issues associated 
with auditing employee benefit plans. 

The Employee Retirement Income Security Act of 1974 (ERISA) applies to most employee benefit 
plans, ERISA is comprised of four sections; Title I deals with the Department of Labor (DpL) 
responstbllities, Including reporting and disclosure (and auditing) requirements; Title II specifies the 
tax law requirements; Title III identifies specific enforcement-related matters; and Title IV addresses 
multiemployer plan issues, including plan termination procedures. Additional resources are provided,, 
on the website of the Employee Benefits Security Administration (EBSA). 


I. Basic Issues Related to Employee Benefit Plans Under ERISA 

A. There are two fundamental types of employee benefit plans under ERISA: 

1. Welfare plans— These provide benefits such as healthcare, disability, death, unemployment, 
job training, and vacation. 

2. Pension plans— These provide benefits involving retirement income or deferral of income 
beyond an employee's period of employment. 

B. Eligibility Requirements— The plan must specify the eligibility requirements. 

1. ERISA specifies minimum eligibility requirementstor pension plans.The minimum age to be 
eligible to enter the plan cannot be set above age 21, and the minimum employment to enter 
the plan is generally 12 months (2 years if the plan is fully vested); generally, an employee has 
to work at least 1000 hours for the year to count toward eligibility. 

2. ERISA does not provide specific eligibility requirements for welfare plans. 

C. Nondiscrimination Requirements —ERISA requirements promote the participation of a broad 
set of employees in an employee benefit plan,-fyir example, the plan features dealing with 
contributions and vesting applicable to highly compensated employees usually must be the same 
for other participants. 

D. Vesting Requirements— ERISA establishes specific minimum vesting standards for pension plans; 
pension plans may vest more quickly than these requirements, but they cannot vest less quickly. 
[Note: Benefits a re "vested" when the employee has earned the rights to those benefits without 
any further performance requirements or conditions.] 

E. Funding Requirements—"Qualified"pension plans (those having tax-exempt status) are subject 
to specific funding requirements; welfare plans are not required to be funded, although plan 
documents typically do address funding Issues. 

F. Exemptions from ERISA—ERISA provides certain specific exemptions from some or all of ERISA, 
but the auditor is not responsible for determining whether a plan is subject to ERISA requirements 
or whether the plan must be audited (although the auditor may, of course, assist in determining 
those matters); the plan sponsor's legal counsel should be Involved in those determinations. 
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€. GAAP classifies employee benefit plans into either of two categories: 

1. Defined benefit plans—The actual benefits are specified in the plan design; the plan's 
obligations are based on the determination of an actuary. 

2. Defined contribution plans—The benefits are limited by the specified contributions to each 
participant's specific account. 

3. ERISA requires that pension plans be funded whether they are viewed as defined benefit or 
defined contribution plans. 

li. Welfare Plans—Basic Terminology 

A. Welfare plans may be classified as defined benefit or defined contribution plans. 

1. Defined benefit plans— These are common (e.g., a specific commitment to provide 
healthcare coverage) and usually do not create separate accounts for each participant. 

2. Defined contribution plans —Individual accounts are maintained separately for each 
participant, and benefits are limited to the balance in the individual's account; an example 
that has grown in popularity is medical flexible spending accounts. 

B. Unfunded versus Funded Plans 

1. Unfunded plans —The benefits are either paid from the employer's assets or by insurance 
coverage (ora combination of those); ERISA exempts unfunded plans, which exempts most 
welfare plans. (The auditor is not responsible for determining whether the plan is "unfunded" 
or "funded"; the plan sponsor's legal counsel should be involved in determining that.) 

2. Funded plans —If any portion of an ERISA benefit plan is deemed "funded," then ail of the 
plan's activities are subject to the ERISA audit requirements; in this case, the plan assets are 
required to be held in trust. 

III. Pension Plans—Basic Terminology 

A. Defined Contribution Plans 

1. 401 (k) plans— These permit employees to defer a portion of their income to the pension 
plan; taxes are deferred until a distribution is made at a future date. 

a. The employer may make a matching contribution, although employer contributions 
generally are not required. 

b. Roth 401 (k) contributions—Subject to specific tax requirements, contributions are 
made with after-tax dollars so that neither the ordinal contribution nor the investment 
earnings will be subject to taxes when distributed. 

2. 403(b) plans —Similar to 401 (k) plans, these are associated with charitable organizations 
and public school entities; there are numerous'Technical requirements, including a "universal 
availability" requirement that nearly all employees are entitled to participate in the plan; also, 
plan assets may be held in a custodial account and need not be held in trust. 

3. Employee stock ownership plans —ESOPs are stock incentive plans primarily invested in the 
employer's securities; these plans are subject to many complex technical issues that require 
auditors to study the underlying plan document In detail. 

B. Defined Benefit Plans 

1. Traditional plans—^The benefits are based on the plan's benefit formula, and the accounting 
considerations are based on various actuarial concepts. 

2. Cash balance plans—In such plans, participants may choose to take lump-sum cash 
distributions or to take distributions as annuities. 

IV. General Audit Considerations 

A. ERISA Audit Requirements—ERISA requires an annual audit by an "independent qualified public 

accountant" of the financial statements of employee benefit plans (i.e., those that are not exempt 

from such a requirement). 
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1. Pension plans—An audit normally is required for a pension plan covered by ERISA having 
at least 100 participants at the start of the plan year (considered a "large" plan); the number 
of "participants" is based on those eligible to participate regardless of the number actually 
participating. 

2. Welfare plans —An audit is normally required for a welfare plan covered by ERISA having 
the following characteristics: (a) it Is a "large" plan having at least 100 participants at the start 
of the plan year (based on those who have actually elected to participate), and (b) the plan 
is "funded" (meaning that assets are held in trust or an account is established In the plan's 
name). 

3. Additional exemptions— There Is a general exemption for pension plans of any number of 
participants when (1) the benefits are provided by an Insurance contract for each participant, 
and (2) those insurance contracts are funded by premiums paid from the employer's 
general assets (perhaps paid In part by participants'contributions); there is a similar general 
exemption for welfare plans of any number of participants. 


Note ■ . ' ’'' 

Determihl^ is required ^^^[pldyee benefit plan requires careful study of the underlying plan 

doeumenVsrThe^pJjgj^dmlnistrator may nee^^^^sult with an attorney knowledgeable about ERISA in making that 

B. DOL Form 5500— The DOL requires plan financial statements to be filed on Form 5500, Annual 
Return/Report of Employee Benefit Plan; the financial statements may be based on GAAP, the cash 
basis, or the modified cash basis of accounting; the DOL also requires the auditor to express an 
opinion on whether the financial statements and supplemental schedules comply with applicable 
DOL requirements. 

C. GAAS— Audits of employee benefit plans should be conducted according to generally accepted 
auditing standards; the audit takes Into consideration relevant compliance issues, but the audit is 
not designed to ensure compliance with applicable laws (such compliance is the responsibility of 
the plan administrator, not the auditor). 

D. Inquiries about the plan's tax status— The auditor should Inquire of management (and 
obtain appropriate written representations) as to whether the plan complies with applicable 
laws and regulations affecting the plan's qualified tax status; the auditor should also read any 
correspondence with the IRS. 

E. Audit areas in a "full-scope audit" (the alternative to a "limited-scope audit")— The auditor 
should address these eight areas: (1) plan Investments and Investment income, (2) employee and 
employer contributions, (3) payments of benefits, (4) participant demographic and payroll data, 
(5) loans to participants, (6) the allocation of investment income to individual participants, (7) 
liabilities and plan obligations, and (8) administrative expenses. 

V. Limited-Scope Audit Engagements 

A. DOL regulations allow the plan administrator to elect a "limited-scope audit engagement" 
involving specific assets that are held by a qualified, regulated financial institution (e.g., an 
insurance company, a bank, or a trust company that is subject to periodic state or federal 
examination); this election does not apply to assets held by a broker/dealer or an investment 
company. 

B. Required certification— The qualified financial institution holding these plan assets must furnish 
a certification that the investments and related investment activity are "complete and accurate"; 
without an acceptable certification, a full-scope audit is required (a mere confirmation is not a 
substitute for such certification). 

C. The plan administrator may then direct the auditor not to perform any audit procedures on 
the investment assets or activities that are the object of the qualified financial institution's 
certification; these investments normally represent the preponderance of the plan's assets. 
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D. Auditor responsibilities regarding the certification —The auditor should (1) read the qualified 
financial institution's certification, (2) agree the certified information with that reported in the 
plan's financial statements, and (3) verify that the financial statement disclosures regarding the 
certified information are in accordance with the requirements of GAAP and in compliance with 
DOL requirements. 

E. Audit areas in a "limited-scope audit"—^The auditor should evaluate the noninvestment 
activity of the plan, including: (1) employee and employer contributions, (2) payments of 
benefits, (3) participant demographic and payroll data, (4) loans to participants, (5) the allocation 
of investment income to individual participants, (6) liabilities and plan obligations, and (7) 
administrative expenses. 

F. Limited-scope audit reports—See the AlCPA sample report that follows. 

1. The audit report includes a disclaimer of opinion on the plan's financial statements (due to the 
scope limitation); 

2. The audit report includes an-"Other Matter" paragraph that comments on supplemental 
schedules that are required by the DOL, along with a disclaimer of opinion on those 
supplemental schedules. 

3. The audit report includes' an opinion that the information complies with applicable DOL rules 
and regulations. 


Sample Standard Limited-Scope Audit Report 
Independent Auditor*s Report 

[Appropriate Addressee] 

Report on the Financial Statements 

We were engaged to audit the accompanying financial statements of XYZ 401 (k) Plan, which comprise 
the statements of net assets available for benefits as of December 31,20X2 and 20X1, and the related 
statement of changes in net assets available for benefits for the year ended December 31,20X2, and 
the related notes to the financial statements. 

Management's Responsibility for the Financial Statements 

Management Is responsible for the preparation and fair presentation of these financial statements in 
accordance with accounting principles generally accepted in the United Statements of America; this includes 
the design, implementation, and maintenance of internal control ^vant to the preparation and fair 
presentation of financial statements that are free from material misstatement, whether due to fraud or error. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements based on conducting the 
audits in accordance vvith auditing standards generally accepted in the United States of America. 
Because of the matter described in the Basis for Disclaimer pf Opinion paragraph, however, we were 
not able to obtain sufficient appropriate audit evidence tc) provide a basis for an audit opinion. 

Basis for Disclaimer of Opinion 

As permitted by 29 CFR 2520.103-8 of the Department of Labor's Rules and Regulations for Reporting 
and Disclosure under the Employee Retirement Income Security Act of 1974, the plan administrator 
instructed us not to perform, and we did not perform, any auditing procedures with respect to the 
information summarized in Note X, which was certified by ABC Bank, the trustee [or custodian] of the 
Plan, except for comparing such information with the related information included in the financial 
statements. We have been informed by the plan administrator that the trustee [or custodian] holds the 
Plan's Investment assets and executes investment transactions. The plan administrator has obtained a 
certification from the trustee [orcustodian] as of December 31,20X2 and 20X1, and forthe year ended 
December 31,20X2, that the information provided to the plan administrator by the trustee 
for custod/anj is complete and accurate. 
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Disclaimer of Opinion 

Because of the significance of the matter described in the Basis for Disciaimer of Opinion paragraph, 
we have not been abfeto^btaln sufficient appropriate audit evidence to provide a basis for an audit 
opinion. Accordingljpfealb not express an opinionon di^^finariclaj.statements. i..^^^-^^^ : . 

Other Matter 

’ schedu/esj as of or for the year ended December 31,20X2, are 

I'l^^f^^l^^epaftment of Labor's (DOL) Rules and Regulations for Reporting and Disclosure 
'^ui^Jgr'jhelEmpl^ee Retirement Income Security Act of 1974 and are presented for the purpose of 
• ^d^^ ^^jjanalysis and are not a required part oflhe financial statements. Because of the significance^ • 
^^^^malterdescribed in the Basis for Disclaimer p^pinibn^ragrai^, wedpnot^re^ an^pjf^hiph 
pontbese'supplementai schedules.' 

Report on Form and Content in Compliance with DOL Rules and Regulations 






The form andcontent of the information Includedln the financial siaternehts and supplemental 
schedules, otherthan that derived from the information certified by the^rpstee/or 
been audited by us lri accdrclance.wifh auditing standards generaily aGcepted Ih the Un^^ 

America and, in our opinion, are presented in compliance with the Departrheht of Labof:^ 

Regulations for Reporting and Disclosure under the Employee Retirement Income Security Act of ^ 
'■* 974 . ' , ■ .. 

{Auditor’s signature] 

[Auditor's city and state] 

[Bate of the auditor's report] 







After studying this lesson, you should be able to: 

1. State the definition of an "attestation engagement" and the three different kinds of attestation 
engagements identified in the definition of "attestation engagement" 

2. Describe the non-authoritative principles associated with attestation engagements, consisting of 
(a) purpose and premise; (b) responsibilities; (c) performance; and (d) reporting. 


Statementson Standards for Attestation Engagements (SSAEs) are issued by the AlCPA's Auditing 
Standards Board (ASB) and are applicable to the preparation and issuance of attestation reports for 
nonlSsuers. In April 2016, the ASB replaced substantially all of the then-existing SSAEs with "clarified" 
SSAEs, similar to what the Auditing Standards Board previously did with the Statements on Auditing 
Standards and to what the Accounting and Review Services Committee did with the Statements on 
Standards for Accounting and Review Services. The main purpose of this project was to make the 
clarified SSAEs easier to read and understand and, therefore, to improve the application of these 
standards in practice; a further purpose was to more closely align U.S attestation-related professional 
standards with international standards. 

Accordingly, the ASB adopted clarity drafting conventions, such as the following: (1) specified 
objectives for each of the clarified sections of the AT-C (l.e.,the clarified SSAE sections); (2) included 
a section on definitions, as applicable, in each AT-C; (3) separated the professional "requirements" 
from the "application and other explanatory material' parts of each AT-C; and (4) adopted formatting 
techniques {e.g., using bullet lists) to Improve the flow and readability of each AT-C 

The clarified SSAEs were Issued as SSAE No. 18, Attestation Standards: Clarification and Recodification, It 
was comprised of the following primary sections: 

• AT-C Preface, Preface to the Attestation Standards 

• AT-C Section 105, Concepts Common to All Attestation Engagements 

• AT-C Section 205, Examination Engagements 
« AT-C Section 210, Review Engagements 

• AT-C Section 215, Agreed-Upon Procedures Engagements 

• AT-C Section 305, Prospective Financial Information 

• PJ-CSect\or\3}0, Reporting on Pro Forma Financial Information 

• AJ-CSect]on3^5, Compliance Attestation 

• AT-C Section 320, Reporting on an Examination of Controls at a Service Organization... 

• AT-C Section 395, Management's Discussion and.Analysis 

The previously issued AT Section 701, Management's-Discussion and Analysis, was adopted as is without 
being Issued in clarified format. The ASB concluded that practitioners rarely report on such MD&A 
presentations, so the existing guidance would be classIfiedas'AT-C Section 395 in unciarified form at 
until further notice. ' 

Compliance with the SSAEs is enforceable under the A1CPA Code of Professional Conduct, specifically 
the Compliance With Standards Rule {ETSec. 310.001). 


!. Definition 


Definition 

Attestation EngagementfAnexammation, review, qragr^d-upon procedures engagement performed 
under the attestation standards related to subject matter or an assertion that is the responsibility of 
another party." 
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il. Structure of the Attestation Standards 

A. Section 105—This section addresses the concepts that are common to any attestation 
engagement. 

B. Section 205,210, and 215—These sections address the additional "level of service" requirements 
and guidance applicable to examination, review, and agreed-upon procedures engagements, 
respectively. 

C. 300-Level Sections— These sections address the additional "subject-matter" requirements and 
guidance associated with certain specific topics. 

III. Principles for Understanding Attestation Engagements (Not Authoritative) 

A. Purpose and Premise 

1 . Purpose —"The purpose of an attestation engagement is to provide users of information, 
generally third parties, with an opinion, conclusion, or findings regarding the reliability of 
subject matter or an assertion about the subject matter, as measured against suitable and 
available criteria." 

2. Premise —"An engagernent in accordance with the attestation standards is conducted on the 
premise that the responsible party is responsible for: 

a. The subject matter (and, if applicable, the preparation and presentation of the subject 
matter) in accordance with (or based on) the criteria; 

b. Its assertion about the subject matter; 

c. Measuring, evaluating, and, when applicable, presenting subject matter that is free from 
material misstatement, whether due to fraud or error; and 

d. Providing the practitioner with: 

1. Access to ail information of which the responsible party is aware that Is relevant to 

the measurement, evaluation, or disclosure of the subject matter; 

ii. Access to additional information that the practitioner may request from the 
responsible party for the purpose of the engagement: and 

iii. Unrestricted access to persons within the appropriate party(ies) from whom the 
practitioner determines it is necessary to obtain evidence." 

B. Responsibilities— "Practitioners are responsible for complying with the relevant performance 
and reporting requirements established in the attestation standards." 

C. Performance 

1. Performance responsibilities —"In all services provided under the attestation standards, 
practitioners are responsible for 

a. Having the appropriate competence and capabilities to perform the engagement, 

b. Complying with relevant ethical requirements, 

c. Maintaining professional skepticism, and 

d. Exercising professional judgment throughout the planning and performance of the 
engagement." 

2. For an examination engagement —"To express an opinion in an examination, the practitioner 
obtains reasonable assurance about whether the subject matter, or an assertion about the 
subject matter, is free from material misstatements, whether due to fraud or error.To obtain 
reasonable assurance, which is a high but not absolute level of assurance, the practitioner 

a. Plans the work and properly supervises other members of the engagement team. 

b. Identifies and assesses the risks of material misstatement, whether due to fraud or error, 
based on an understanding of the subject matters, its measurement or evaluation, the 
criteria, and other engagement circumstances. 
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c. Obtains sufficient appropriate evidence about whether materia! misstatements exist by 
designing and implementing appropriate responses to the assessed risks. Examination 
procedures may involve inspection, observation, analysis, inquiry, reperformance, 
recalculation, or confirmation with outside parties." 

3. For a review engagement—"To express a conclusion in a review, the practitioner obtains 
limited assurance about whether any material modification should be made to the subject 
matter in order for it to be in accordance with (or based on) the criteria or to an assertion 
about the subject matter in order for it to be fairly stated. In a review, the nature and extent of 
the procedures are substantially less than In an examination. To obtain limited assurance in a 
review, the practitioner 

a. Plans the work and properly supervises other members of the engagement team. 

b. Focuses procedures in those areas In which the practitioner believes increased risks 
of misstatements exist, whether due to fraud or error, based on the practitioner's 
understanding of the subject matter. Its measurement or evaluation, the criteria, and 
other engagement circumstances. 

c. Obtains review evidence, through the application of inquiry and analytical procedures 
or other procedures.as^appropriate, to obtain limited assurance that no material 
modifications should be made to the subject matter in order for it to be in accordance 
with (or based on) the criteria." 

4. For an agreed-upon procedures engagement —"To report on the application of 
agreed-upon procedures, the practitioner applies procedures determined by the specified 
parties who are the intended users of the practitioner's report and who are responsible 
for the sufficiency of the procedures for their purposes. As a result of the engagement, the 
practitioner reports on the results of the engagement but does not provide an opinion or 
conclusion on the subject matter or assertion. In an agreed-upon procedures engagement, 
the practitioner 

a. Plans the work and properly supervises other members of the engagement team. 

b. Applies the procedures agreed to by the specified parties and reports on their results." 

D. Reporting—"Based on evidence obtained, the practitioner expresses an opinion in an 

examination, expresses a conclusion In a review, or reports findings in an agreed-upon procedures 
engagement." 
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After studying this lessofi/you should &e able to: 


1. Describe the ■ iidanoethati* 

for Attestation ^ibements 


pticable to attest 

ACs), interpretive^^^^^^^^^^ftti 

identify the t ">ftyp^ pf profesjonal requirer ts ('unconditional requ^n 
"presumptivi manj[atoryitq#enients")an(l ' a language associated ptf 

3. Describe thf pre t nditions that ^applicable to any attestation engagenr 



ements oh Standards 
:ion publications. 

r^"ahd 

*ch. 


I. General Comments 

A, Written Assertion —A written assertion as to whether the subject matter is measured or 
evaluated according to suitable criteria Is expected when performing an examination, review, or 
agreed-upon procedures engagement under the attestation standards. 

1. For an examination or a review engagement 

a. When the engaging party is the responsible party and refuses to provide a written 
assertion— The practitioner should withdraw from the engagement when that Is permitted. 

b. When the engaging party is not the responsible party and the responsible party 
refuses to provide a written assertion— That refusal should be disclosed in the 
practitioner's report, and the report's use should be restricted to the engaging party. 

2. For an agreed-upon procedures engagement— When the responsible party refuses to 
provide a written assertion, that refusal should be disclosed in the practitioner's report. 

B. Definitions 



Definitions 

Engaging Party. "The party(ies) that engages the practitioner to perform the attestation engagement" 

Responsible Party: "The party(ies) responsible fo ^^^^^ ftnatter. If the nature of the subject matter 
is such that no such party exists,, a party who ha^^^B&e basis for makinq a written, assertion . 
about the subject matter may be deemed to be the respon^ble party." 


1. The firm has a responsibility to establish and maintain a system of quality control over 
its attestation practice to provide reasonable assurance that: (a) personnel comply with 
professional standards and applicable legal and regulatory requirements; and (b) reports 
issued by the firm are appropriate in the circumstances. 

2. Attestation standards apply to individual attestation engagements, whereas quality control 
standards apply to the firm's attestation practice as a whole. 

II. Guidance Applicable to Attestation Engagements 

A. Two Categories of Professional Requirements in the SSAEs 

1 . Unconditional requirements —Must be complied with in ail relevant circumstances and are 
indicated by the word "must." 

2. Presumptively mandatory requirements —Aallow for rare exceptions and are indicated 
by the word "should." For any such exceptions, the practitioner should perform alternative 
procedures to meet the requirement's Intent. 

B. "Application and Other Explanatory Material" (including Appendices of SSAEs)— ^These 
are not "requirements" and are presented separately within the SSAEs. indicated by the words 
"may,""might," or "could," they may explain what a requirement means or provide examples of 
appropriate procedures. 
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C. The Role of "Interpretive" and "Other" Publications 

1. Interpretive publications—The accountantshould consider the guidance of applicable 
interpretive publications In perfornning the engagement. These are recommendations, not 
requirements, on the application of SSAEs in particular circumstances after Auditing Standards 
Board members have had the opportunityto comment on the proposed interpretations. 

2. Other attestation publications—^The accountant may evaluate the relevance and 
appropriateness of such guidance to the engagement, but other attestation publications have 
no authoritative status. 

Mi. Preconditions for an Attestation Engagement 

A. Three Fundamental Preconditions Applicable to Any Attestation Engagement 

1. The practitioner must be independent. 

2. The responsible party must take responsibility for the subject matter. 

3. The engagement must have the following four characteristics: 

a. The subject matter is appropriate. 

'-Note'-' ,, 

Subject matter is "appropriate” If it is (a) capable of consistent measurernent or evaluationi and (b) can be subject to . 

procedures toobtain sufficient appropriate evideoce to support the opinion, condusloni or findings, as applicable; 

If the subject matter Is not appropriate for ari examination, it is not appropriate for a review, 


b. The criteria to be used are suitable and available. 


^luitabie criteria hayelBfes0>^^ct^^iC5: (a) tl^^ie^levant to the subj^^^^^ppheyare freefrom bias; fc) they 
pow reasonably:CQn$)stenttneasgtietnents/ey9ip^!ii|; and (d) they do factors. 

estafejished fey a body designated by the AlCRA are considered to be suitable. 

if cr|teria:are%^^ also unsuitable for a review.. 

When criteria are available only to specified parties, the use pf the practitioner^ report is required to beTestf|cted t6;thfe 
specified parties. , ^ 


c. The practitioner expects to obtain the necessary evidence related to the opinion, 
conclusion or findings. 

d. The practitioner's opinion, conclusion, or findings is to be expressed in a written report. 

B. If Any of These Preconditions Are Not Met—The practitioner should attempt to resolve the 
issue(s) with the engaging party. If the engagement has already been accepted, the practitioner 
should determine whether it is appropriate to continue'with the engagement, and (if so) how to 
communicate the matter in the report. 

IV. Other Considerations Common to Any Attestation Engagement 

A. Acceptance and Continuance—Appropriate procedures related to acceptance and continuance 
of attestation engagements should be followed. The practitioner should not accept an attestation 
engagement unless he or she has reached an understanding with the engaging party as to the 
terms of the engagement. 

B. Acceptance of a Change in theTerms of the Engagement—"Reasonable justification" is 
required to change the terms of an engagement to a lower level of service. 

1. If there is reasonable Justification—^The practitioner’s report should not reference the 
original engagement, any procedures that may have been performed, or scope limitations 
that caused the engagement to change. 

2. A change in the nature of the engagement originally requested may not be considered 
reasonably justified if that change is motivated by an inability to obtain sufficient appropriate 
evidence regarding the subject matter. 
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C. Using the Work of Other Practttioner(s) 

1. Obtain an understanding about the other practitioner's independence and competence. 

2. Communicate with the other practitioner about the scope and timing of the other 
practitioner's work. Be involved with the work of the other practitioner when assuming 
responsibility for that work. 

3. Evaluate the adequacy of other practitioner's work for purposes of the engagement. 

4. Determine whether to reference the other practitioner in the report. 

D. Engagement Documentation 

1. Documentation completion date—The practitioner should assemble the final engagement 
file no later than 60 days following the report release date. 

a. Deletions—After the documentation completion date, the practitioner should not delete 
or discard any documentation prior to the end of the retention period. 

b. Additions— After the documentation completion date, additions may be made, but the 
practitioner must document the reasons for the additions as well as when and by whom 
the additions were m'ade/reviewed. 

2. Retention—^The practitioner should adopt reasonable procedures to retain the 
documentation for a period sufficient to meet his or her needs and any legal/regulatory 
requirements. 

3. Confidentiality— The practitioner should adopt reasonable procedures to protect the 
confidentiality of the documentation. 

4. Departures from presumptively mandatory requirements— The practitioner should 
document the justification for such a departure and how alternative procedures met the 
intent of that requirement. 

E. Engagement Quality Control Review 

1. When such a review is required, the engagement partner should discuss with the quality 
control reviewer the significant findings; the engagement partner should not release the 
report until the engagement quality control review is completed. 

2. The engagement quality control reviewer should evaluate the significant judgments and 
conclusions reached, including the following: 

a. Discussing significant findings with the engagement partner; 

b. Reading the written subject matter/assertion and proposed report; 

c. Reading selected documentation for significant judgments and conclusions reached; ond 

d. Considering whether the proposed report is appropriate. 
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1. Understand the practitioner's responsibl!ltytQ obtaln a'v^ritt^n as^rt^oh for.a^ lamination ' - 

■engagement®-V;\.':' o.' ' 

Understand the practitioner's responsibilities in performing an examination engagement, Induding 


I. Definition 


I Definition 

1/ Exommat{on Engagement"An attestation engagementin which the practitioner obtains reasonable 
assurance by obtaining sufficient appropriate evidence about the measurement oreyaluation of 
subject matter against criteria in order to be able to draw reasonable conclusions on which to base the 
practitioner's opinion about whethet^die subject matter is In accordance with (prbased on) the criteria 
or the assertion is fairly stated, in all material respects." 


Note 

Tlie guidance for examination engagements is provided in the Clarified SSAEs, specifically by AT-C 205, Exatrilhation 
fngagemenfs. In addition, the practitioner is required to comply with AT-C105 fConcepfs Common foA//Affesf<3f/an 
fngagemenfs) as well as any applicable subject-matter sections. 

Cpfopllance with these attestation standards is enforceable under the AiCPA's Code of Professional Conduct (specifically, the 
Compiiqnce With Standards 


II. Agreeing on the Terms of the Engagement 

A. The practitioner and the engaging party should agree on the terms of the engagement, which 
should be documented in an engagement letter (or other suitable form of written agreement). 

B. The terms of the engagement should include the following; 

1. The objective and scope of the engagement; 

2. The responsibilities of the practitioner; 

3. The responsibilities of the responsible party and the engaging party, if those are different; 

4. A statement that the engagement will be conducted according to AiCPA attestation 
standards; 

5. A statement about the inherent limitations of an examination; 

6. A statement identifying the criteria for measurement or evaluation of the subject matter; and 

7. Acknowledgment by the engaging party to provide the practitioner with a representation 
letter at the conclusion of the engagement. 

C. Such an agreement should be obtained for each engagement, but, if the terms of the preceding 
engagement have not changed, the practitioner may simply remind the engaging party of the 
terms of the engagement (and document that communication). 

III. Request a Written Assertion about the Subject Matter 

A. If the Engaging Party Is the Responsible Party and Refuses to Provide a Written Assertion— 

The practitioner should withdraw when that Is permitted. 

B. if the Engaging Party Is Not the Responsible Party and the Responsible Party Refuses to 
Provide a Written Assertion—^The practitioner need not withdraw but should disclose that 
refusal in the practitioner's report and restrict the use of the report to the engaging party. 
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C. The responsible party is still responsible for the subject matter as a whole, and the practitioner 

should request a written assertion covering the entire relevant period(s), even when the 

responsible party was not present during some (or all) of the period covered by the practitioner's 

report. 

IV. Planning and Performing the Engagement 

A. Engagement Planning-Related Matters 

1. The practitioner should establish an overall strategy that specifies the scope, timing, and 
direction of the engagement, Including considering factors significant to the engagement 
team as well as the necessary resources. 

2. The practitioner should develop an engagement plan that specifies the nature, timing, and 
extent of procedures to be performed. 

3. The practitioner may need to revise the overall strategy and engagement plan due to 
unexpected events or changes in conditions. 

4. The practitioner should perform risk assessment procedures to identify the risks of materia! 
misstatement and to design appropriate procedures in response to that assessment; he or she 
should also obtain an understanding of internal control over the preparation of the subject 
matter. 

B. Engagement Performance-Related Matters 

1. Tests of control— The practitioner should perform tests of control about the operating 
effectiveness of relevant controls when (a) Intending to rely on controls for purposes of 
designing other procedures; (b) procedures other than tests of control cannot provide 
sufficient appropriate evidence; or (c) the subject matter is internal control. 

2. Procedures other than tests of control— The practitioner should design and perform tests 
of details or analytical procedures, unless the subject matter is internal control. 

3. Analytical procedures performed in response to assessed risks —The practitioner should 
(a) determine the suitability of specific analytical procedures; (b) evaluate the reliability of the 
data from which an expectation is developed; (c) develop an expectation that is sufficiently 
precise to identify material misstatements; and (d) Investigate significant differences from the 
expectation by Inquiry or other procedures. 

4. Procedures regarding estimates—The practitioner should evaluate (a) whether the 
responsible party has appropriately applied the cri^rlalo any estimates; and (b) whether the 
methods underlying estimates are appropriate and have been consistently applied (and that 
any changes in the estimates or methods used are appropriate). 

5. Fraud and noncompliance with laws and regulations —^The practitioner should (a) consider 
the risk of material misstatement due to fraud or noncompliance with laws or regulations, (b) 
make inquiries of appropriate parties about such rhatters, and (c) evaluate whether there are 
any unusual relationships that might indicate risks of material misstatement due to fraud or 
noncompliance with laws or regulation! ^ 

6. Communication responsibilities— The practitioner should communicate to the responsible 
party (and also to the engaging party. If different) (a) any known or suspected fraud, (b) any 
known or suspected noncompliance with laws or regulations, (c) uncorrected misstatements, 
and (d) identified internal control deficiencies. 

7. Using the work of a practitioner's specialist 

a. When planning to use the work of a practitioner's specialist, the practitioner should (1) 
evaluate the specialist's competence and objectivity; (2) obtain an understanding of 
the specialist’s expertise; (3) agree with the specialist regarding the scope of the work 
to be performed, the parties'roles, the need for communication, and the need to meet 
confidentiality requirements; and (4) evaluate the specialist's work for the practitioner's 
purposes. 
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b. The practitioner's procedures when planning to use the work of a specialist will vary with 
the circumstances, including the risks of material misstatement and the practitioner's 
experience working with the specialist 

c. An agreement between the practitioner and the practitioner's specialist often is obtained 
in the form of an engagement letter (but it is not technically required). 

8. Using the work of Internal auditors 

a. When planning to use the work of the internal audit function (either in obtaining 
evidence or in providing direct assistance), the practitioner should evaluate the 
competence and objectivity of the internal audit function; 

b. When planning to use the work of the internal audit function in obtaining evidence, the 
practitioner should also evaluate whether the work was subject to a systematic and 

disciplined approach. 

c. When planning to use the Internal auditors to provide direct assistance, the practitioner 
should obtain written acknowledgment from the responsible party that the internal 
auditors will be allowed to follow the practitioner's directives without interference. 

d. The practitioner is responsible for all significant Judgments and should appropriately 
supervise and review the work of the internal auditors. 

9. Considering subsequent events and subsequently discovered facts 

a. The practitioner should inquire whether the responsible party (and the engaging party, if 
different) is aware of any subsequent events up to the date of the report that could have a 
significant effect; and if there are, the practitioner should perform appropriate procedures 
regarding those events. 

b. The practitioner has no responsibility to perform additional procedures after the report 
date; however, if there are subsequently discovered facts that may have caused revision 
of the report if known at the report date, the practitioner should respond appropriately to 
those facts. 

V. Written Representations 

A. The practitioner should request written representations from the responsible party, including the 
responsible party's assertion about the subject matter. 

B. When the Engaging Party Is Not the Responsible Party— The practitioner should request 
additional written representations from the engaging p^ty. 

C. If the Responsible Party Refuses to Provide the Requested Written Representations 

1. When the engaging party is the responsibfe party— The practitioner should discuss the 

matters with the appropriate party (parties) and take appropriate action if the matters are not 

resolved satisfactorily. 

2. When the engaging party is not the responsible party —^The practitioner should 

a. Make inquiries of the responsible party and seek oral responses. 

b. If satisfactory oral responses are obtained —^The practitioner should restrict the use of 
the report to the engaging party. 

c. If one or more of the requested representations are not provided (either In writing 
or orally)—A scope limitation exists, and the practitioner should determine the effect on 
the report. 

D. The representations should address the subject matter and periods covered by the practitioner's 
report. 

E. The written representations letter should have the same date as the practitioner's report. 


429 




Forming Conclusions and Reporting 


VI. Documentation 

A. The documentation should permit an experienced practitioner without any connection to the 
engagement to understand the work performed and the basis for the primary decisions. 

B. The practitioner should prepare documentation sufficient to comply with AlCPA Professional 
Standards and applicable legal and regulatory requirements, including these six matters: 

1. The identifying characteristics of the specific items tested; 

2. Who performed the work and the date the work was completed; 

3. The discussions with the responsible party (or others) about significant findings or issues, 
including the nature of the matters discussed (and when and with whom the discussions 
occurred); 

4. The actions taken when the engaging party Is the responsible party and will not provide one 
or more of the requested written representations (or when representations provided are not 
seen as reliable); 

5. The oral responses provided when the engaging party Is not the responsible party and the 
responsible party will not provide the requested written representations; and 

6. Who reviewed the work performed and the date of that review. 

C. The documentation normally addresses the following additional matters: (1) compliance with 
relevant ethical requirements, Including applicable independence requirements; (2) conclusions 
about acceptance and continuance of ciient relationships and engagements; and (3) conclusions 
about any consultations that occurred during the engagement. 

D. If information has been obtained that Is Inconsistent with the practitioner's final conclusion about 
a significant matter, the practitioner should document how he or she dealt with the inconsistency. 
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After Studying this ic^sfon, you bhoiild be able to: 

1. Recognize the element i in a prdctitioner's unmodified examinatiui reportforan 

attestation engagement 

2. Identify the varioi IS typ^ of modified > ports that might be issued for an examinatk i ■ ement 
andthedrcumstcncesil )t wouid res ilt in each type of modification 


i. Focus of the Practitioner's Report 

A. May either report on the responsible party's written assertion or report directly on the subject 
matter. 

B. When reporting on the assertion, the assertion should accompany the practitioner's report (or the 
assertion may be clearly stated in the report). 

li. Content of an Unmodified Examination Report 

A. A standardized format for the examination report is not required for all examination 
engagements— The report is to Include the identified basic elements but may be tailored to the 
circumstances of the engagement. 

B. These 12 elements should be included in the unmodified report: 

1. A title that includes the word "independent" 

2. An appropriate addressee 

3. Identification of the applicable subject matter or assertion, including the point in time or 
period of time involved 

4. Identification of the criteria against which the subject matter was measured or evaluated 

5. A statement that Identifies (a) the responsible party and its responsibility, and (b) the 
practitioner's responsibility to express an opinion 

6. A statement that (a) the examination was conducted in accordance with AlCPA attestation 
standards, (b) those standards require the practitioner to plan and perform the engagement 
to obtain reasonable assurance (whether the subjecj-ma'tter is in accordance with the criteria 
in all material respects or whether the responsible party's assertion is fairly stated), and (c) 
the practitioner believes the evidence obtained is sufficient and appropriate to provide a 
reasonable basis for the opinion 

7. A description of the nature of an examination engagement 

8. A statement describing any significant inherent limitations associated with the engagement 

9. An opinion about whether the subject-matter is in accordance with (or based on) the criteria 
in all material respects or whether the responsible party's assertion is fairly stated in all 
material respects 

10. The signature of the practitioner's firm (either manual or printed) 

11. The city and state where the practitioner practices 

12. The date of the report 

C. AT-C Section 205 provides several examples of unmodified examination reports. 
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Independent Accountant's Report 


[Appropriate Addressee] 


Example 1 


The following is an illustrative practitioner's report for an examination engagement in which the 
practitioner has examined the subject matter and Is reporting directly on the subject matter. 


Example 2 

Practitioner’s Unmodified Examination Report'on an Assertion 


The following is an illustrative practitioner's report for an examination engagement in which the 
practitioner has examined the responsible party's assertion and is reporting on that assertion. 


We have examined management of XYZ Company's assertion that [identify the assertion, including the 
subject matter and the criteria; e.g., the accompanying schedule ofinvestment returns of XYZ Company for 
the year ended December 31,20XX, is presented in accordance with {or based on] the ABCcriteria set forth 
in Note 1]. XYZ Company's management is responsible for Its assertion. Our responsibility is to express 
an opinion on management's assertion based on our examination. 


independent Accountant's Report 

iAppropriate Addressee] 

We have examined lidentify the subject matter; e.g., the accompanying schedule ofinvestment returns of 
XYZCorhpgny for the year ended December 31,20XX\. XYZ Company's management is responsiblefdf 
[identify the subject matter; e.g., presenting the schedule ofinvestment returns] in accordance With (or \ 

based on) [identify the criteria; e.g., the ABC criteria set forth in Note I]. Our responsibility Is to express an | 
opinion on [identify the subject matter; e.g., the schedule of investment returns] based on our examination. :| 

Our examination was conducted in accordance with attestation standards established by the 
American Institute of Certified Pubii^.Accountants.Hiose standards require that we plan and perform 
the examination to obtain reasonable assurance about whether [identify the subject matter; e.g., the 
scheduleof investment returns] is In accordance with (or based on) the criteria, in all material respects. 

An examination involves performing procedures to obtain evidence about [identify the subject matter; 
e.g., the schedule of investment returns].The nature, timing, and extent of the procedures selected 
depend on our judgment, including an assessment of the risks of material misstatement of [identifythe 
subject matter; e.g., the schedule ofinvestment returns], whether due to fraud or error. We believe that 
the evidence we obtained is sufficient and appropriate to provide a reasonable basis for our opinion. 

[Include a description of significant inherent limitations, if any, associated with the measurement or 
evaluation of the subject matter against the criteria.] 


[Additional paragraph(s) may be added to emphasize certain matters relating to the attestation 
engagement or the subject matter.] 


In our opinion, [identify the subject matter; e.g., thescheduleof investment returns of XYZ Company for 
the year ended December 31,20XX or the schedule ofinvestment returns referred to above], is presented in 
accordance with (or based on) [identify the criteria; e.g., the ABC criteria set forth in Note 1], in all material 
respects. 






[Practitioner's signature] 
[Practitioner's city and state] 
[Date of practitioner's report] 
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Our examination was conducteS m accordance WJ^ attention standkds«stablished by^^t^ 

American Institute of Gertlfied Public Accountants;^0ei^ndaTds'fedai»'^ ttta^^ and perform 

the exarninatipn to obtain reasonabie assofahce abQMti^e^er fnanagernent's assertion is fairly 
stated, in ail rnaterial respects. An exaininadonlnyoiyes peifp^^^ 

about management^ assertion,The nature, timing,%fJd.e>S^fbf the procedures sejeGted depend;^-^ 
bn oufjudgment, including an assessrnent of the nsfes of broteriai misstatement of rhanagement^ 

. ' asserion^whether due to fraud dr erfor. We beHeVe^ft^|^;evidehGe we detained is sufficl^ 

- ■appropriate to provide a reasonable basis for Our opinion. 

[/nc/ude a descr/pf/on pfsighificani mherehtliinM^^pn^ ifariy^assodatedwith the ^easuremeni oi 
evaluation of the subject matter agtJinst the 

lAddithndlparagfaphldrriaybeaddedtoemphasizecertammatters.relqimgtpt^^^^^^ , 

tengagomeptoftHe subject matter] . 

\n our ppmon, management's BSsenlon'Xhat [identify the assertion, induding the subject matter and 
the criteria; e.g., the accompanying schedule of investment returns ofjfYZCdrnpanyfor the year ended 
' December 31,20XXj is presented in accordance with [or based on] the ABC criteria set fbitth in Note 7] ,is: 
fairly stated, in ail material respects..'''' 

IPmctithner's signature} 

[Practitioner's city and state] 

[Date of practitioner's report] 


III. Modified Opinions 

A. Modify the Opinion 

1. When sufficient appropriate evidence has not been obtained in all material respects 
(regarding the scope); or 

2. when the subject matter is not in accordance with the criteria in all material respects 
(regarding the presentation). 

B. When Modifying the Opinion —Include a separate paragraph in the report that describes the 
reason(s) for the modification. 

C. Qualified Opinion— Express a qualified opinion when the possible effect of the scope limitation 
"could be material, but not pervasive"or when the misstatement of the subject matter "is material, 
but not pervasive" to the subject matter. 

D. Adverse Opinion —Express an adverse opinion when the misstatement of the subject matter is 
both "materia! and pervasive"to the subject matter.' 

E. Disclaimer of Opinion —Express a disclaimer of opinion when the possible effect of the scope 
limitation could be both "material and pervasive." 

F. When Expressing Either a Qualified or an Adverse Opinion Due to Misstatement of the 
Subject Matter— Express the opinion directly on the sub/ecrmaffer, not on the assertion (even if 
the assertion acknowledges the misstatement). 

G. Change the description of the practitioner's responsibility for modified opinions. 

1. When expressing a qualified or an adverse opinion —Amend the description of the 
practitioner's responsibility to express the belief that the evidence obtained is sufficient and 
appropriate to provide a basis for the modified opinion. 

2. When expressing a disclaimer of opinion— Amend the description of the practitioner's 
responsibility to say that the practitioner was engaged to examine the subject matter (or 
assertion). 
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IV. Other Examination Reporting Considerations 

A. Restricted Use Paragraph—An alert to restrict the use of the report should be added in three 
circumstances: 

1. When the criteria used to evaluate the subject matter are appropriate only for a limited 
number of parties; 

2. When the criteria used to evaluate the subject matter are available only to specified parties; or 

3. When the engaging party is not the responsible party and the responsible party does not 
provide the requested written representations but does provide appropriate oral responses— 
The practitioner's report should be restricted to the engaging party. 

B. Reference to the Practitioner's Specialist 

1. Should not refer to the work of the practitioner's specialist in a report having an unmodified 
opinion. 

2. May refer to an external specialist when the opinion Is modified and reference is relevant to 
understanding the modification. 

C. Other Information 

1. If the practitioner's report is included in a document that contains the subject matter 
or assertion, along with other information —Read-the other information for material 
inconsistencies. 

2. If there is a materia! inconsistency (or if a material misstatement of fact exists in the 
other information) —Discuss the matter with the responsible party and take appropriate 
action such as: 

a. Request that the appropriate party consult with a third party (such as legal counsel); 

b. Seek legal advice about possible actions; 

c. Communicate with third parties (such as a regulator); 

d. Describe the material Inconsistency in the report; or 

e. Withdraw, when that is permissible. 

3. "Other information"does not include Information on the appropriate party's website. 

D. If a Written Report Is Readily Available —The practitionermay also report orally or by using 
symbols (such as a web seal with a hyperlink to a written report). 






Review Engagements 


ir Studying th lesson, you should be able to: 

Understand tl epr amotv r> responsibility tool tain a wntten assertion tor a review engagement 

Understand ti epractitioners rLSponslhilitie»in [ orforming ] nA'icvx t m in t u i 

^ h I ten repieseniaiions 


1. Definition 


Definition 

ReviewBngagement "kr\ attestation engc^^ft^ whlchlt^i^^ltipner obtains limited assurance 
SyoitaiiMng sufficient appropriate review evidence about tftTmeasurement or evaluation of subject 
pafter against criteria in order to express a conclusion about whether any material modification; 
shpuld be made to the subjectmatter In.order for it to be in.accordance with (or based oh) the criteria 
of td:the assertion In order for it to be-^irly stated" 


Note 

The guidance for examination engagements is provided In the Clarified SSAEs, specifically by AT-C 210^ Review Engagements. 
in addition, the practitioner is required to cofnply with AT< 105, Conc^ts Common to All Attestation Engagements, as vveU.as 
any applicable subject-matter sections. 


Compliance with these attestation standards is enforceable under the AlCPA's Code of Professional Conduct (specifically, the 
ComplianceWithStandardsnAe). 


AT-C 210 specifically prohibits review engagements, involving (a) prospective financial information; (b) internal cdiitroi; or (c) 
cdm^li.ahc^ with the requirements of specified laws, regulations, rules, contracts, or grants. 


II. Agreeing on theTerms of the Engagement 

A. The practitioner and the engaging party should agree on the terms of the engagement, which 
should be documented in an engagement letter (or other suitable form of written agreement). 

B. These terms should Include the following: 

1. The objective and scope of the engagement; ^ ' 

2. The responsibilities of the practitioner; 

3. The responsibilities of the responsible party and the engaging party, if those are different; 

4. A statement that the engagement will be conducted according to AlCPA attestation 
standards; 

5. A statement that a review Is substantially Jess in scope than an examination and that, 
accordingly, no opinion will be expressed; .. ' 

6. A statement Identifying the criteria for measurement or evaluation of the subject matter; and 

7. Acknowledgment by the engaging party to provide the practitioner with a representation 
letter at the conclusion of the engagement. 

C. Such an agreement should be obtained for each engagement, but, if the terms of the preceding 
engagement have not changed, the practitioner may simply remind the engaging party of the 
terms of the engagement (and document that communication). 

III. Request a Written Assertion about the Subject Matter 

A. If the engaging party is the responsible party and refuses to provide a written assertion— 
The practitioner should withdraw when that is permitted. 
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B. tf the engaging party is not the responsible party and the responsible party refuses to 
provide a written assertion—The practitioner need not withdraw but should disclose that 
refusal in the practitioner's report and restrict the use of the report to the engaging party. 

C. The responsible party is still responsible for the subject matter as a whole and should request a 
written assertion covering the entire relevant period(s), even when the responsible party was not 
present during some {or all) of the period covered by the practitioner's report. 

IV. Planning and Performing the Engagement 

A. The practitioner should obtain a sufficient understanding of the subject matter and circumstances 
of the engagement to design and perform procedures to achieve the objectives of the 
engagement. 

B. Procedures to Be Performed 

1. The practitioner should design and perform analytical procedures and make inquiries to 
obtain limited assurance. 

2. Analytical procedures may not be applicable when the subject matter is qualitative instead of 
quantitative. In that case, the practitioner may need to perform other appropriate procedures. 

3. The practitioner should increase the focus in the areas of the engagement that have increased 
risks of material misstatement. 

C. Analytical Procedures 

1. The practitioner should: (a) determine the suitability of specific analytical procedures 
(considering the subject matter and assessed risks of material misstatement); (b) evaluate the 
reliability of data from which the expectation is developed; and (c) develop an expectation 
that is sufficiently precise to identify material misstatements. 

2. The practitioner should investigate significant differences from expectations by (a) inquiring 
of the responsible party and (b) performing any other procedures considered necessary. 

D. Inquiries and Other Review Procedures —^The practitioner should inquire of the responsible 
party about the following: 

1. Whether the subject matter has been prepared according to (or based on) the criteria; 

2. The practices used by the responsible party to measure and record the subject matter; 

3. Questions arising in connection with the other review procedures; and 

4. Communications from regulatory authorities or others, if any. 

E. Fraud, Laws, and Regulations— The practitioner should make inquiries to determine whether 
the applicable parties have any knowledge of fraCTd (including suspected or alleged fraud) or 
noncompliance with laws or regulations affecting the subject matter. 

F. Incorrect, Incomplete, or Otherwise Unsatisfactory Information— The practitioner 
should perform additional procedures to obtain limited'assurance as to whether any materia! 
modifications should be made to the subject matter. 

G. Using the Work of a Practitioner's Specialist or Internal Auditors —The practitioner should 
apply the same requirements stated in AT-C 205 (regarding examination engagements). 

H. Considering Subsequent Events and Subsequently Discovered Facts 

1. The practitioner should inquire whether the responsible party (and the engaging party, if 
different) is aware of any subsequent events up to the date of the report that could have 
a significant effect; if there are, the practitioner should perform appropriate procedures 
applicable to those events. 

2. There is no responsibility to perform additional procedures after the report date. If there are 
subsequently discovered facts that may have caused revision of the report if known at the 
report date, the practitioner should respond appropriately to those facts. 
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V. Written Representations 

A. The practitioner should request written representations from the responsible party, including the 
responsible party's assertion about the subject matter. 

B. When the Engaging Party is Not the Responsible Party— The practitioner should request 
additional written representations from the engaging party. 

C. When the Responsible Party Refuses to Provide the Requested Written Representations 

1. if the engaging party is the responsible party —The practitioner should withdraw from the 
engagement (when withdrawal is permitted under applicable law or regulation). 

2. When the engaging party is not the responsible party —^The practitioner should 

a. Make inquiries of the responsible party and seek oral responses. 

b. If satisfactory oral responses are obtained —The practitioner should restrict the use of 
the report to the engaging party. 

c. if one or more of the requested representations are not provided (either in writing 
or orally) —A scope limitation exists, and the practitioner should withdraw from the 
engagement, if possible. 

D. The representations should address the subject matter and periods covered by the practitioner's 
report. 

E. The written representations letter should have the same date as the practitioner's report. 

VI. Documentation 

A. The documentation should permit an experienced practitioner without any connection to the 
engagement to understand the work performed and the basis for the primary decisions. 

B. The practitioner should prepare documentation sufficient to comply with AiCPA Professional 
Standards and applicable legal and regulatory requirements, including the following matters: 

1 . The identifying characteristics of the specific items tested; 

2. Who performed the work and the date the work was completed; 

3. The discussions with the responsible party (or others) about significant findings or issues, 
including the nature of the matters discussed (and when and with whom the discussions 
occurred); 

4. The actions taken when the engaging party is the responsible party and will not provide one 

or more of the required written representations (or when representations provided are not 
seen as reliable): ^ 

5. The ora! responses provided when the engaging party is not the responsible party and the 
responsible party will not provide the required written representations; and 

6. Who reviewed the work performed and the date it Was reviewed. 

C. The documentation normally addresses the following additional matters: 

1 . Compliance with relevant ethical requirements, including applicable independence 
requirements; 

2. Conclusions about acceptance and continuance of client relationships and engagements; and 

3. Conclusions about any consultations that occurred during the engagement. 

D. If Information Has Been Obtained that is Inconsistent with the Practitioner's Final 
Conclusion about a Significant Matter —The practitioner should document how the practitioner 
dealt with the inconsistency. 
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After studying this lesson, ^^^buld be able to: 

1. Recognize the elements^^^ required in a practitioneis unmodified reviev ii ii ran 


attestation engagement^^^. 


2. State the circumstances 




ijUit in modified com lusions being expff i u eview 


report for an attestation! 




I. Focus of the Practitioner's Report 

A. May either report on the responsible party's written assertion or directly on the subject matter. 

B. When reporting on the assertion, the assertion should accompany the practitioner's report (or the 

assertion may be clearly stated In the report). 

II. Content of an Unmodified Review Report 

A. A standardized format for the review report Is not required for all review engagements. The 

report is to include the identified basic elements but may be tailored to the circumstances of the 

engagement. 

B. The following elements should be included In the unmodified review report: 

1. A title that includes the word "Independent"; 

2. An appropriate addressee; 

3. Identification of the applicable subject matter or assertion, including the point in time or 
period of time involved; 

4. Identification of the criteria against which the subject matter was measured or evaluated; 

5. Statement that identifies (a) the responsible party and Its responsibility and (b) the 
practitioner's responsibility to express a conclusion; 

6. Statement that (a) the review was conducted In accordance with AiCPA attestation standards, 
(b) those standards require the practitioner to plan and perform the engagement to obtain 
limited assurance whether any material modifications should be made (either to the subject 
matter or to the responsible party's assertion), (c) a review is substantially less in scope than 
an examination so disclaim an opinion, and (d) the practitioner believes the review provides a 
reasonable basis for the conclusion; 

7. Statement describing any significant inherent limitations associated with the engagement; 

8. The conclusion about whether any material modifications should be made to the subject 
matter or to the responsible party's assertion;. 

9. The signature of the practitioner's firm (either manual or printed); 

10. The city and state where the practitioner practices; and 

11. The date of the report. 
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C. AT-C Section 210 provides several examples of review reports. 



Example 1 

Practitioner's Review Report on Subject Matter; Unmodified Conclusion 


Note: The following Is an illustrative practitioner's report for a review engagement in which the 
practitioner has reviewed the subject matter and is reporting directly on the subject matter. 


Independent Accountant's Review Report 


We have feviewedT/dent/fy the subject matter; e.g., the accompanying schedule of investment returns of 
XYZ Company for the year ended December 31,2QXX\. XYZ Company's management Is responsible for 
[identify the subject matter; e.g., presenting the schedule of investment returns] in accordance with (or 
based on) [identify the criteria; e.g., the ABC criteria set forth in Note 1]. Our responsibility is to express a 
conclusion on [identify the subject matter; e.g., the schedule of investment returns] based on our review. 

Our review was conducted in accordance with attestation standards established by the American 
Institute of Certified Public Accountants. Those standards require that we plan and perform the review 
to obtain limited assurance about whether any materia! modifications should be made to [identify the 
subject matter; e.g., the schedule of investment returns] in order for it to be in accordance with (or based 
on) the criteria. A review is substantially less in scope than an examination, the objective of which is to 
obtain reasonable assurance about whether [Identify the subject matter; e.g., the schedule of investment 
returns] is in accordance with (or based on) the criteria, in all material respects, in order to express 
an opinion. Accordingly, we do not express such an opinion. We believe that our review provides a 
reasonable basis for our conclusion. 

[Include a description of significant inherent limitations, if any, associated with the measurement or 
evaluation of the subject matter against the criteria.] 

[Additional paragraph(s) maybe added to emphasize certain matters relating to the attestation 
engagement or the subject matter.] 

Based on our review, we are not aware of any material modifications that should be made to [identify 
the subject matter; e.g., the accompanying schedule of investment returns of XYZ Company for the year 
ended December 31,20XX\, in order for It be In accordance with (or based on) [identify the criteria; e.g., 
theABCcriteriasetforthinNotel]. 

[Practitioner's signature] ; 

[Practitioner's city and state] 

[Date of practitioner's report] - 



Example2 

Practitioner's Review Report on Subject Matter; Qualified Conclusion 


Note: The following is an illustrative practitioner's report for a review engagement that expresses 
a qualified conclusion because the review identified conditions that, result in a material, but not 
pervasive, misstatement of the subject matter, based on the criteria. The practitioner has reviewed 
the subject matter and is also reporting on the subject matter. 
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^eMv§tQy}^WQ&de0ifythe subjectmatten&g^ theaccompanyirig schedule of investmem ' 

MZ%Qmpdny for^^^^ December3?,.20>pQ/XyZ CQrnfiany'? management is responsible for 

lids0^ih^sa^^^ for example, presenting die schedule of investment returns] based on [identify 

^the}critefidfe^;,theABCcriteria set forth in Note'll. Ourresponslbility is to express a conclusion on 
i&nb^;fh&so^d->r!aftei^e.gvtbesche(Ar/eof/n\«smientrefums] based on pur review^ : 

OuKrpvlew was cond^ in accordance with attestation standards established by the American 
jhstitdte-of Certified Public Accountants. Those standards requirethat we plan and perform the review 
to pitain limited assurance about whether any material modifications should be made to [identify the 
sub/eCtmdffer/eg.,-tbe schedu/eof?nvesfmenf reftj'rns]in order for it to be in accordance with (or based- 
on) the criteria. A review is substantially less In scope than an examination, the objective of which is to 
obtain reasonable assurance about whether [identify the subject matter; e.g., the schedule of mvestment 
returnslis in accordance with (or based on) the criteria, In all material respects, fh order tO express 
an opinion. Accordingly, we do not express such an opinion. We believe that oiir review provides a 
reasonable basis for our conclusipnr'' 

[Include a description of significant inherent limitations, if any, associated with the measurement or 
evaluation of the subject matter against the criteria.] 

[Additionalparagraph(s) may be added to emphasize certain matters relating to the attestation 
engagement or the subject matter.] 

Our review identified [describe condition(s) that, individually or in the aggregate, resulted In d material- 
misstatement, or deviation from, the criteria]. 

Based on our review, except for the matter(s) described In the preceding paragraph, we are not aware; • 
of any material modifications that should be made to [identify the subject matter; e.g., the accompanying 
schedule of investment returns ofXYZ Company for the year ended December 31,20XXI, in order for it to 
be In accordance with (or based on) [identify the criteria; e.g., the ABC criteria set forth in Note 1], 

[Practitioner's signature], 
iPrgctitloher's city and state] 

[Date of practitioner's report] 


lii. Modified Conclusions 

A. Misstatement of Subject Matter 

1. The practitioner should consider whether qualification of the conclusion in the "standard 

practitioner's report" is an adequate way to disclose the misstatement of the subject matter, 
if that is not an adequate way to disclose the matter, then the practitioner should withdraw 
from the engagement ' 

2. The practitioner may express a qualified conclusion with the phrase "except for the effects 
of.. ."when the effects are material but not pervasive. In such a case, the practitioner should 
report directly on the subject matter, not on the assertion (even if the assertion acknowledges 
the misstatement). 

3. If the effects of the misstatement are material and pervasive, the practitioner should withdraw 
from the engagement when that is permissible. 

B. Scope Limitations —If sufficient appropriate review evidence is not obtained, a scope limitation 

exists, and the practitioner should withdraw when that is permissible. 
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Other Review Reporting Considerations 

A. Restricted-Use Paragraph—An alert to restrict the use of the report should be added in the 

following circumstances: 

1. When the criteria used to evaluate the subject matter are appropriate only for a limited 
number of parties; 

2. When the criteria used to evaluate the subject matter are available only to specified parties; or 

3. When the engaging party is not the responsible party and the responsible party does not 
provide the requested written representations but does provide appropriate oral responses. 

In this case, the practitioner's report should be restricted to the engaging party. 

B. Reference to the Practitioner's Specialist 

1. The practitioner should not refer to the work of the practitioner's specialist in a report having 
an unmodified conclusion. 

2. The practitioner may refer to an external specialist when the conclusion is modified and 
reference to the specialist Is relevant to understanding the modification. 

C. Other Information 

1. If the practitioner's report is Included in a document that contains the subject matter 
or assertion, along with other information —^The practitioner should read the other 
information for material inconsistencies. 

2. If there is a material inconsistency (or if a material misstatement of fact exists in the 
other information) —The practitioner should discuss the matter with the responsible party 
and take appropriate*action [e.g., (a) request that the appropriate party consult with a third 
party (such as legal counsel); (b) seek legal advice about possible actions; (c) communicate 
with third parties (such as a regulator); (d) describe the material inconsistency in the report; or 
(e) withdraw, when that is permissible]. 


After studying this lesson, you should be able to: 

1. Understand the practitidher's responslbinties In performingin agreed-upoh pracedur^ 
engagement, includiiig obtaining a written as^rtion and written representations. • 

2. Recognize the elements that are required Ina practitioner's agmed-upbn prbcedtifes report. 


Definitions 


Definitions 

Agreed-Upon Procedures Engagement''Ar\ attestation engagement in which a practitioner performs 
speafie procedures on subject nhatter or an assertion and reports the findings without presiding an 
opinion or a conclusion on it. The parties to the engagement. . . agree upon and are responsible for 


Nonpartidpqnt Party:"An. additional specified party the practitioner is requested to add as a user of the 
practitioner's report subsequent to the completion of the agreed-upon procedures engagement." 

Spec/fied Pflrfjr.'The Intended user(s) to whom use the written practitioner's report iSrlirnited" 


Note 

The guidance for agreed-upon procedures engagements is provided in the Clarified SSAEs, specifically.; 
by ATfC ai.Si Agreed-Upon Procedures Engagements. In addition, the practitioner is required to comply . 
with AT:G-105 (Concepts Common foA//Affestot/on Engagements) as well as any applicable subject- ,. ; 
matter sections. . 

Compliance with these attestation standards Is enforceable under the AlCPA's Code of Professional 
Conduct (specifically, the Comp//ance Standards Rule). 


M. Agreeing on the Terms of the Engagement 

A. The practitioner and the engaging party should agree on the terms of the engagement, which 

should be documented in an engagement letter (or other suitable form of written agreement). 

B. The terms of the engagement should Include thefollowing; 

1. The nature of the engagement; 

2. Identification of the subject matter or assertjpn, the responsible party, and the criteria to be 

used; . 

3. Identification of the specified parties; ' 

4. Acknowledgment by the specified parties of their responsibility for the sufficiency of the 
agreed-upon procedures for their purposes; 

5. The responsibilities of the practitioner; 

6. A statement that the engagement will be conducted according to AlCPA attestation 
standards; 

7. Enumeration of (or reference to) the procedures to be performed; 

8. Identification of disclaimers expected to be In the report; 
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9. Identification of the restricted use of the practitioner's report; 

10. Identification of any assistance to be provided to the practitioner; 

11. Identification of any practitioner's external specialist to be used; and 

12. Agreement about materiality limits to be applied, if applicable. 

Ml. Requesting a Written Assertion 

A. The practitioner should request a written assertion about the subject matter from the responsible 
party. 

B. If the Engaging Party is Not the Responsible Party and the Responsible Party Refuses to 
Provide a Written Assertion —^The written agreement (engagement letter) should state that no 
such assertion will be provided. 

C. When the Responsible Party Was Not Present during Some (or All) of the Period Covered by the 
Practitioner's Report—The responsible party still is responsible for the subject matter as a whole, 
and the practitioner should request a written assertion covering the entire relevant period(s). 

IV. Planning and Performing the Engagement 

A. Procedures to Be Performed —^The practitioner should not agree to perform procedures that are 
vague in meaning or otherwise open to varying interpretations. 

1 . Examples of unacceptable words (because they are too vague) to describe actions include the 
following: note, review, general review, limited review, evaluate, analyze, check, test, interpret, 
and verify. 

2. Examples of acceptable words to describe actions include the following: inspect, confirm, 
compare, agree, trace, inquire, recalculate, observe, and mathematically check. 

B. Using the Work of a Practitioner's External Specialist— Any involvement of a practitioner's 
external specialist should be agreed to by the specified parties; and the practitioner's report 
should describe any assistance provided by the practitioner's externa! specialist. 

C. Using the Work of Internal Auditors— Only the engagement team (or other practitioners) 
should perform the agreed-upon procedures referenced in the practitioner's report. 

D. Communication Responsibilities— TTie practitioner should communicate any known and 
suspected fraud and noncompliance with laws or regulations to the responsible party (and to the 
engaging party when the engaging party is not the responsible party). 

V. Written Representations 

A. The practitioner should request written representations from the responsible party, including the 
responsible party's assertion about the subject matter. 

B. When the Engaging Party Is Not the Responsible Party— The practitioner should request 
additional written representations from the engaging party. 

C. If the Responsible Party Refuses to Provide the Requested Written Representations 

1 . If the engaging party Is the responsible party —^The practitioner should discuss the matters 
with the appropriate party (parties) and. If the matters are not resolved satisfactorily, take 
appropriate action (such as withdrawing from the engagement or determining the effect of 
the matter on the report). 

2. When the engaging party is not the responsible party— The practitioner should; 

a. Make inquiries of the responsible party and seek oral responses. 

b. If satisfactory oral responses are not obtained —^The practitioner should take 
appropriate action (such as withdrawing from the engagement or determining the effect 
of the matter on the report). 
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D. The representations should address the subject matter and periods covered by the practitioner's 
report. 

E. The written representations letter should have the same date as the practitioner's report. 


A. The documentation should be sufficient to determine that the specified parties agreed on the 
procedures to be performed. 

B. The documentation should be sufficient to determine that the practitioner complied with 
Professional Standards and applicable legal and regulatory requirements, including: 

1. The identifying characteristics of specific items tested; 

2. Who performed the work and the date the work was completed; 

3. The discussions with the responsible party (or others) about significant findings or issues, 
including the nature of the matters discussed (and when and with whom the discussions 
occurred); 

4. The actions taken when the engaging party is the responsible party and will not provide one 
or more of the requested'written representations (or the representations provided are not 
seen as reliable); 

5. The oral responses provided when the engaging party Is not the responsible party and the 
responsible party will not provide the requested written representations; and 

6. Who reviewed the work performed and the date it was reviewed. 

C. The documentation should be sufficient to determine the results of the procedures performed 
and the evidence that was obtained. 

Vli. Reporting Issues for Agreed-Upon Procedures Engagements 

A. A Standardized Format for the Report is not Required for AM Agreed-Upon Procedures 
Engagements— The report should include the identified basic elements but may be tailored to 
the circumstances of the engagement. 

B. Content of the Practitioner's Agreed-Upon Procedures Report 

1. A title that includes the word "independent"; 

2. An appropriate addressee; 

3. Identification of the subject matter or assertion ar^ the nature of the engagement; 

4. Identification of the specified parties; 

5. A statement that the procedures were agreed to by the specified parties; 

6. A statement that identifies the responsible party for the subject matter or assertion; 

7. A statement that the specified users are resppnsible fo*" the sufficiency of the procedures 
performed; 

8. A list of the procedures performed and the related findings; 

9. A description of agreed-upon materiality limits, if applicable; 

10. A statement that the engagement was conducted in accordance with AlCPA attestation 
standards, that the practitioner was not engaged to conduct an examination or a review, that 
the practitioner does not express an opinion or conclusion, and that other matters might have 
been reported had the practitioner performed additional procedures; 

11. A description of the assistance of practitioner's external specialist, if applicable; 

12. A statement regarding reservations concerning procedures or findings, if applicable; 
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13. An alert to restrict the use of the report to specified parties (when the engagement is also 
performed under Government Auditing Standards, the alert should describe the purpose of 
the report and state that it is not suitable for any other purpose); 

14. A manual or printed signature of the practitioner's firm; 

15. Thecityand state of the practitioner's office; and 

16. The date of the report. 

C. AT-C Section 215 provides several examples of review reports. 



Example 1 

Practitioner's Agreed-Upon Procedures Report Related to a Statement of Investment 
Performance Statistics 


The following is an illustrative practitioner's report for an agreed-upon procedures engagement 
involving a statement of investment performance statistics. 


independent Accountants Report on Applying Agreed-Upon Procedures 


[Appropriate Addressee] 

We have performed the procedures enumerated below, which were agreed to by [identify the specified 
partydes); e.g., the audit committees and managements of ABC Inc. and XYZ Fund], on [identify the subject 
matter; e.g., the accompanying Sfafemenf of Investment Performance Statistics of XYZ Fund for the year. 
ended December 31,20X1]. XYZ Fund's management is responsible for [identify the subject matter; e^g., 
the Statement of Investment Performance Statistics for the year ended December 31,20X1]. The sufficiency 
of these procedures is solely the responsibility of the parties specified In this report. Consequently, we 
make no representation regarding the sufficiency of the procedures enumerated below either for the 
purpose for which this report has been requested or for any other purpose. 

[Include paragraphs to enumerate procedures and findings] 

This agreed-upon procedures engagement was conducted in accordance with attestation standards 
established by the American Institute of Certified Public Accountants. We were not engaged to and 
did not conduct an examination or review, the objective of which would be the expression of an 
opinion or conclusion, respectively, on [identify the subject matter; e.g., the accompanying Statement of 
Investment Performance Statistics of XYZ Fund for the year ended December 31,20X1]. Accordingly, we do 
not express such an opinion or conclusion. Had we performed additional procedures, other matters 
might have come to our attention that would have been reported to you. 

[Additional paragraphfs) may be added to describe other matters.] 

This report is intended solely for the information and use of [identify the specifiedparty(ies);e.g., the 
audit committees and managements of ABC Inc. and XYZ Fund! and is not intended to be, and should 
not be, used by anyone Other than the specified parties. , : - ^ 

[Practitioner's signature] 

[Practitioner's city and state] 

[Dote of practitioner's report] 


D. If the Responsible Party Refuses to Provide Written Assertion—The practitioner should 
disclose that refusal in the agreed-upon procedures report 

E. Restrictions on the Performance of Procedures 

1. When restrictions on the performance of agreed-upon procedures occur—^The 

practitioner should attempt to obtain agreement from the specified parties for modification 
of the agreed-upon procedures. 
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2. When such agreement cannot be obtained— The practitioner should describe any such 
restrictions in the practitioner's report or withdraw from the engagement. 

Adding Specified Parties (Nonparticipant Parties) 

1. When agreeing to add a nonparticipant party— The practitioner should obtain 
acknowledgment (normally in writing) that the nonparticipant party agrees to the procedures 
performed and takes responsibility for the sufficiency of those procedures. 

2. When adding a nonpartkipant party—The date of the report should not be changed. 

3. When providing written acknowledgment that the nonparticipant has been added —The 

acknowledgment should normally state that no procedures have been performed after the 
date of the practitioner's report. 

When the Subject Matter Consists of Elements, Accounts, or items of a Financial Statement— 

The practitioner's report might add a statement that the agreed-upon procedures do not 
constitute an audit (or review) and Include an appropriate disclaimer regarding an opinion (or 
conclusion). 

Reservations Concerning Procedures or Findings— The practitioner may include "explanatory 
paragraph(s)"to comment on'matters such as the following: 

1. Disclosure of assumptions or Interpretations used 

2. Description of the condition of records, controls, or data involved 

3. Explanation that the practitioner has no responsibility to update the practitioner's report 

When an Agreed-Upon Procedures Report May Be Publicly Available —A restricted-use 
report filed with regulatory authorities or governmental entities may be made available to the 
public as required by law or regulation. 







Prospective Financial Information 

After Studying this iessofi, you should be able to: 

i.; Identify thetwp different types of prospective, 

:2b Jdentify the two kinds oNngagemert information under the clarified 

:, dttestatidn standards; and recognize the elements that are required in a practitioner's report for 
: each of those kinds of engagements. . .. . . 


I. Definitions 


Definitions 

g/hcMcto/Forecast: "Prospective financial statements that present, to the best of the responsible party's 
knowledge and belief an entity's expected financial position, results of operations, and cash flows. A 
financial forecast is based on the responsible party's assumptions reflecting conditions it expects to 
exist and the course of action it experts to take." 

Financial Projection: "Prospective financial statements that present, to the best of the responsible 
party's knowledge and belief, given one or more hypothetical assumptions, an entity's expected 
financial positiori, results of operations, and cash flows. A financial projection Is sometimes prepared.to 
present one or more hypothetical courses of actions for evaluation, as in response to a question such 
as'What would happen if... ?'A financial projection is based on the responsible party's assumptions 
reflecting conditions it expects would exist and the course of action it expects would be taken, given 
one or more hypothetical assumptions," 

Partial Presentation: "A presentation of prospective financial Information that excludes one or more . 
of the applicable items required for prospective financial statements as described in chapter 8 of the 
lAIGPA Guide]." 


Applicability; AT-C 305, Prospective FinancialInhrmation, applies to examination or agreed-upon 
procedures engagements involving prospective financial information, specifically to such reports 
issued bh drafter May 1,2017. 


ii. Examination Engagements on Prospective Financial Information 

A. Preconditions —^The practitioner should not accept an engagement to examine a 

1. Forecast or projection unless the responsible party has agreed to disclose the significant 
assumptions; 

2. Projection unless the responsible party has agreed to identify which of the assumptions are 
hypothetical and to comment on the limitations of the projection's usefulness; or 

3. Partial presentation that does not comment on the limitations of the presentation's 
usefulness. 

B. Requesting a Written Assertion— ^The practitioner should request a written assertion from the 
responsible party; if that party refuses, the practitioner should \A/ithdraw when that is permitted by 
applicable law or regulation. 

C. Planning —^The practitioner should establish an overall engagement strategy that guides the 
development of the engagement plan to determine the scope and timing of the work and should 
obtain an appropriate level of knowledge about the entity's industry (and accounting principles 
used} and the key factors underlying the prospective financial information. 


447 







Forming Conclusions and Reporting 


D. Examination Procedures 

1. The practitioner should perform the procedures considered necessary to report on whether 
the assumptions underlying the forecast (or projection) are suitably supported and provide a 
reasonable basis for the forecast (or projection). 

2. The practitioner should evaluate the support for significant assumptions individually and 
in the aggregate. They are viewed as suitably supported if each significant assumption is 
supported by the "preponderance" of the information. 

3. For a forecast—^The practitioner should evaluate whether there is a reasonably objective 
basis for the forecast and whether sufficiently objective assumptions can be developed for 
each key factor identified. 

4. For a projection—^The practitioner should evaluate whether the hypothetical assumptions 
are consistent with the purpose of the projection; the practitioner need not obtain support 
for the hypothetical assumptions, however. 

5. Evaluating the preparation and presentation of a forecast or projection —The 

practitioner should obtain reasonable assurance that 

a. The presentation reflects the identified assumptions; 

b. Any computations made are mathematically accurate; 

c. Assumptions are internally consistent; 

d. Accounting principles used are appropriate; 

e. Information is presented according to the AlCPA Guide; and 

f. Assumptions have been adequately disclosed. 

E. Written Representations in an Examination Engagement 

1. For a forecast —In addition to the representations required by AT-C 205 (regarding 
examination engagements), the practitioner should request the following from the 
responsible party: 

a. The forecast presents the expected financial statements and reflects expected conditions; 

b. The underlying assumptions are reasonable and suitably supported; and 

c. If the forecast is expressed as a range, the range was not selected in a misleading manner. 

2. For a projection —In addition to the representations required by AT-C 205, the practitioner 
should request representations from the responsible party that: 

a. Identify the hypothetical assumptions (and Identify any of those that are considered to be 
"improbable"); 

b. Describe the limitations of the usefulness, of the presentation; 

c. The projection presents expected fihariclal information based on present circumstances, 
expected conditions, and the occurrence of the hypothetical events; 

d. The assumptions (other than the hypothetical assumptions) are reasonable and suitably 
supported; and 

e. If the projection is expressed as a range, the range was not selected in a misleading 
manner. 

3. Regarding the requirement in AT-C 205 that the subject matter is presented In 
accordance with "the criteria"—Specifically, the practitioner should reference the AlCPA 
Guide. 
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4. The practitioner should request the required written representations from the responsible 
party {even If the engaging party is not the responsible party). There Is no alternative to 
obtaining the requested representations, so the responsible party's refusal to furnish the 
representations is a scope limitation that may preclude an unmodified opinion and warrant 
withdrawal. 

F. Content of a Report on an Examination of a Forecast 

1. A title that includes the word "independent"; 

2. An appropriate addressee; 

3. Identification of the prospective financial information involved; 

4. Identification of the criteria as the AlCPA Guide; 

5. A statement that identifies the responsible party and its responsibility and that identifies the 
practitioner's responsibility; 

6. A statement that identifies that the examination was performed in accordance with 
attestation standards established by the AlCPA, that describes the role of those standards, 
and that expresses the belief that the evidence obtained provides a reasonable basis for the 
opinion; 

7. A statement that describes the nature of the examination engagement; 

8. An opinion whether the presentation Is in accordance with the AlCPA Guide, and whether 
the underlying assumptions are suitably supported and provide a reasonable basis for the 
forecast or projection; 

9. A statement that the prospective results may not be achieved and identifying any other 
significant inherent limitations; 

10. A statement that there is no responsibility to update the report for events occurring after the 
date of the report; 

11. The signature of the practitioner's firm; 

12. The city and state of the practitioner; and 

13. The date of the report. 

14. When the prospective information is presented as a range— The practitioner should 
include a separate paragraph stating that the responsj^ble'party has chosen to present the 
expected results (of one or more assumptions) as a range. 

G. Additional Elements for a Report on an Examination of a Projection 

1. Identification of the hypothetical assumptions; 

2. Description of the purpose for which the projection-vvas prepared; and 

3. An alert to restrict the use of the report to the specified parties. Modified opinions should be 
expressed for the following circumstancesj. -^ 


Any type of or ^ projection) woulds^^^^priate for Jirnit0 use; 

however, pnli^jffifwacastlsapprtipiiate for general use. 

AforecasthestObebasedonareaiistlcpremisedtatlssupportable:however,thepieml5efaraprojectionn Si i )o 
supportable although the hypoth tical .ssumptlonsshbuMbeconsistentwiilcthepfesentationspurpose 1 i valuating 
assumptions9tf>erd)anhypotheticala5sumption5,d)epractitionercanconcludethattheyaie»uitabiy$upt V i each 
significanta .umption is supported l)ytlii | n ponderance of information. 
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H. An alert to restrict the use of the report to the specified parties. Modified opinions should 

be expressed for the following circumstances: 

1. If the prospective financial information departs in a material way from AiCPA 
presentation guidelines—^The practitioner should express a qualified or adverse opinion. 

2. If the prospective financial information fails to disclose any "significant assumptions" 
or if one or more of the significant assumptions are not suitably supported or do not 
provide a reasonable basis for the forecast or projection—^The practitioner should express 
an cjc/verse opinion. 

3. If unable to obtain sufficient appropriate evidence as a basis for the opinion—^The 
practitioner should express a disclaimer of opinion. 

I. Partial Presentations 

1. The practitioner should consider whether key factors affecting elements, accounts, or items 
that are related to those in the partial presentation have been taken into consideration and 
whether ail significant assumptions have been disclosed. 

2. Partial presentations usually are appropriate only for limited use. The practitioner should 
include a description of-aTiy limitations on the usefulness of the presentation. 

J. AT-C 305 provides examples of unmodified examination reports on a forecast and on a projection 

that do not contain a range. 


:o: 


Example 1 

► Practitioner's Examination Report on a Financial Forecast 
independent Accountant's Report 


[Appropriate Addressee] 

We have examined the accompanying forecast of XYZ Company, which comprises [identify the statements; 
e.g., the forecasted balance sheet as of December 31,20XX, and the related forecasted statements of income, 
stockholders'equity, and cash flows for the year then ending], based on the guidelines for the presentation 
of aforecast established by the American Institute of Certified Public Accountants. XYZ Company's 
management is responsible for preparing and presenting the forecast in accordance with the guidelines 
for the presentation of a forecast established by the American Institute of Certified Public Accountants. 
Our responsibility is to express an opinion on the forecast based on our examination. 

Ourexamination was conducted In accordance with attestation standards established by the 
American Institute of Certified Public Accountants.Those standards require that we plan and 
perform the examination to obtain reasonable assurarjce about whether the forecast is presented 
in accordance with the guidelines for the presentation of a forecast established by the American 
Institute of Certified Public Accountants, in all rnaterlal respects. An examination involves performing ' 
procedures to obtain evidence about the forecast. The nature, timing, and extent of the procedures 
selected depend on our judgment, including an assessmenrofthe risks of material misstatement of 
the forecast, whether due to fraud or error. We bejleye that the evidence we obtained is sufficient and 
appropriate to provide a reasonable basis for our opinion. 

In our opinion, the accompanying forecast is presented, in all material respects, in accordance with the 
guidelines for the presentation of a forecast established by the American Institute of Certified Public 
Accountants, and the underlying assumptions are suitably supported and provide a reasonable basis 
for management's forecast. 

There will usually be differences between the forecasted and actual results because events and 
circumstances frequently do not occur as expected, and those differences may be material. We have no 
responsibility to update this report for events and circumstances occurring after the date of this report. 

[Practitioner's signature] 

[Practitioner's city and state] 

[Date of practitioner's report] 
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Practitioner's Examination Report; on a Financial Projection 
independent Accountant's Report 

[Appropriate Addressee] 

We have examined the accompanying projection of XYZ Company, which comprises [identify the 
stateinents;e.g., the projected balance sheet as of December 31,20XX, and the related projected statements 
of income, stockholders'equity, and cash flows hr the year then ending] based on the guidelines for the 
presentation of a projection established by the American Institute of Certified Public Accountants. 

XYZ Company's management is responsible for preparing and presenting the projection based on 
[identify the hypothetical assumption; e.g., the granting of the requested loan as described in the summary 
of significant assumptions] In accordance with the guidelines for the presentation of a projection 
established by the American Institute of Certified Public Accountants.The projection was prepared 
for [describe the special purpose, for example, the purpose of negotiating a loon to expand XYZ Company's 
plant]. Our responsibility is to express an opinion on the projection based on our examination. 

Our examination was conducted in accordance with attestation standards established by the 
American Institute of Certified Pubiic'Accountants. Those standards require that we plan and perform 
the examination to obtain reasonable assurance about whether the projection is presented in 
accordance with the guidelines for the presentation of a projection established by the American 
Institute of Certified Public Accountants, in all material respects. An examination involves performing 
procedures to obtain evidence about the projection. The nature, timing, and extent of the procedures 
selected depend on our judgment, including an assessment of the risks of material misstatement of 
the projection, whether due to fraud or error. We believe that the evidence we obtained is sufficient 
and appropriate to provide a reasonable basis for our opinion. 

In our opinion, [describe the hypothetical assumption(5);e.g., assuming the granting of the requested 
loan for the purpose of expanding XYZ Company's plant as described in the summary of significant 
assumptions] the projection referred to above Is presented, in all material respects, in accordance with 
the guidelines for the presentation of a projection established by the American Institute of Certified 
Public Accountants, and the underlying assumptions are suitably supported and provide a reasonable 
basis for management's projection given the hypothetical assumption(s). 

Even if [identify the hypothetical assumption; e.g., the loan is granted and the plant is expanded], there will 
usually be differences between the projected and actual results because events and circumstances 
frequently do not occur as expected, and those differences may ^ m'^aterial. We have no responsibility 
to update this report for events and circumstances occurring after the date of this report. 

The accompanying projection and this report are intende^f solely for the information and use of 
[identify specified parties, for example, XYZ Company dpd DBF National Bank] and are not intended to be 
and should not be used by anyone other than these specified parties. 

[Practitioner's signature] 

[Practitioner's city and state] ' . : ; ' . 

[Date of practitioner's report] 
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Practitioner's Agreed-l 

Independent Accountant's Agreed-l 


to a Forecast 


[Appropriate Addressee] . . : 

We have performed the procedures enumerated below, which were agreed to by [identify the specified 
parties; e.g., the boards of directors ofXYZ Corporation and ABC Company], on [identify the statements; 
e.g., theforecasted balance sheet as of December 31,20XX, and the related forecasted statements of 
income, stockholders'eqvity, and cash flows ofDEF Company, a subsidiary of ABC Company, for the year 
then ending]. DEF Company's management is responsible for preparing and presenting the forecast in 
accordance with the guidelines for the presentation of a forecast established by the American Institute 
of Certified Public Accountants. The sufficiency of these procedures is solely the responsibility of those 
parties specified In this report. Consequently, we make no representation regarding the sufficiency of 
the procedures enumerated below either for the purpose for which this report has been requested or 
for any other purpose, 

[Include paragraphs to enumerate procedures and findings.] 

This agreed-upon procedures engagement was conducted in accordance with attestation standards 
established by the American Institute of Certified Public Accountants. We were not engaged to and 
did not conduct an examination or review, the objective of which would be the expression of an 
opinion or conclusion, respectively, about whether the forecast is presented in accordance with the 
guidelines for the presentation of a forecast established by the American Institute of Certified Public . 
Accountants or whether the underlying assumptions are suitably supported or provide a reasonable 
basis for management's forecast Accordingly, we do not express such an opinion or conclusion. Had . 
we performed additional procedures, other matters might have come to our attention that would 
have been reported to you. 

There will usually be differences between the forecasted and actual results because events and 
circumstances frequently do not occur as expected, and those differences may be material. We have 
no responsibility to update this report for events and circumstances occurring after the date of this 
report ^ 

This report IS intended solely for the information and use of [/denf/fy the spec/ffedpa/’t/es; e.g., the 
boards of directors of ABC Company and XYZ Corporation] and Is not intended to be, and should not be, 
used by anyone other than these specified parties. 

[Practitioner's signature] 

[Practitioner's city and state] 

[Date of practitioner's report] ' 


IH. Agreed-Upon Procedures Engagements on Prospective Financial Information 

a. Preconditions for an Agreed-Upon Procedures Engagement —^The practitioner should 
not perform such an engagement on a forecast or projection unless the prospective financial 
information includes a summary of significant assumptions. 

b. Content of the Practitioner's Agreed-Upon Procedures Report 

1. A title that includes the word "independent"; 

2. An appropriate addressee; 

3. Identification of the prospective financial information and the nature of the engagement; 

4. Identification of the specified parties; 

5. A statement that the procedures performed were agreed to by the specified parties; 
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6. A Statement that identifies the responsible party and Its responsibility for presenting the 
forecast or projection in accordance with AlCPA guidelines; 

7. A statement that the specified parties are responsible for the sufficiency of the procedures 
performed and that the practitioner makes no representation regarding the sufficiency of the 
procedures; 

8. A list of the procedures performed (or reference to those procedures) and related findings. 
{The practitioner should not express a conclusion); 

9. Description of any agreed-upon materiality limits, as applicable: 

10. A statement that (a) the engagement was conducted in accordance with AlCPA attestation 
standards; (b) did not conduct an examination or a review; (c) does not express such an 
opinion or conclusion; and (d) had additional procedures been performed, other matters 
might have been identified that would have been reported; 

11. Description of any assistance provided by a practitioner's external specialist, as applicable; 

12. A statement that the prospective results may not be achieved and identifying any other 
significant inherent limitations; 

13. A statement that there is no responsibility to update the report for events occurring after the 
date of the report; 

14. Any reservations concerning procedures or findings, as applicable; 

15. An alert restricting the use of the report to the specified parties; 

16. The signature of the practitioner's firm; 

17. The city and state of the practitioner; and 

18. The date of the report. 

AT-C 305 provides an example of an agreed-upon procedures report on a forecast. 



Pro Forma Financial Information 


After studying this lesson/you shduld be able to: 

1 i State what is meant by the term "pro form^firi^^it^rmation. . ; v ■ 'V 

2v ldenti^ the two kinds of engagements as with pro forma financial information under the 

'''/.''cl^ifieSatlestation standards. 

3. ReGoghize the elements that are required in a pracdfionefs examihatiphdr review repoft dn f^^^^ 
fOrmafina^^^ 


I. Definitions 


Definitions 

Criteria for the Preparation of Pro Forma Financial Informatiom/'The basis disclosed In the pro forma 
financial information that management used to develop the pro forma financial information, Including 
the assumptions underlying the pro forma financial Information." \ 

Pro Forma Financial Information: "A presentation that shows what the significant effects bn historical 
financial information might have been had a consummated or proposed transaction (or event) 
occurred at an earlier date." 


Applicability: AT-C 310, Reporting on Pro Forma Financial Information, applies to examination or • 
review engagements involving pro forma financial Information. 

it does not apply to agreed-upon procedures engagements Involving pro forma financial information 
or when parties request a comfort letter on pro forma financial information in connection with a stock 
offering. 

For example, pro forma financial information may be used to show the effects of (a) business 
GOmbIhations; (b) changes in capitalization; (c) dispositions of significant business segments; (d) 
changes in the form of business organizations; or (e) proposed saies of securities. 


li. Examination or Review Engagements on Pro Forma Financial Information 

A. Preconditions (in addition to those identified In^ther relevant AT-C sections) 

1. The document containing the pro forma financial information must also include the historical 
financial statements (or the historical financial statements must be readily available); 

2. For an examination, the historical financial statements must have been audited; for a review, 
the historical financial statements must have been either audited or reviewed—they cannot 
express a higher level of assurance on the pro forma information than on the historical 
financial statements; 

3. The audit report or the review report, as applicable, must be included in the document 
containing the pro forma financial Information (or it must be readily available); and 

4. The practitioner should obtain an appropriate level of knowledge of the entity's accounting 
and financial reporting practices to perform the necessary procedures to report on the pro 
forma financial information. 

B. Requesting a Written Assertion— The practitioner should request a written assertion from 
management; if management refuses, the practitioner should withdraw from the engagement 
(when that is permitted by law or regulation). 
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C. Assessing the Suitability of the Criteria—l^e criteria used by management are considered 
"suitable" when the criteria address the following matters: 

1. That the financial information is extracted from the applicable historical financial statements; 

2. That the pro forma adjustments are directly attributable to the transaction (event), are 
factually supportable, and consistent with the entity's applicable financial reporting 
framework and its accounting policies; and 

3. That the pro forma financial Information is appropriately presented, including adequate 
disclosures for users'understanding. 

D. Examination and Review Procedures —The practitioner should apply the following procedures 
to the assumptions and pro forma adjustments for either an examination or a review engagement: 

1. Obtain an understanding of the underlying transaction (event); 

2. Obtain an understanding of the accounting and financial reporting practices of the entity 
(entities); if another practitioner performed the audit/review of the historical financial 
statements, the practitioner still should obtain this understanding; 

3. Discuss with management th^r assumptions about the effects of the transaction/event; 

4. Obtain sufficient evidence regarding the adjustments; 

5. Evaluate whether pro forma adjustments are included for all significant effects; 

6. Evaluate whether management's underlying assumptions are presented in a clear, 
comprehensive manner; 

7. Evaluate whether the pro forma adjustments are consistent with each other and with the data 
used to make them; 

8. Evaluate whether the computations of the adjustments are mathematically accurate and 
whether the pro forma column properly applies those adjustments to the historical financial 
statements: and 

9. Read the pro forma financial information and evaluate whether (a) the transaction/event, the 
underlying assumptions, and the pro forma adjustments (and any significant uncertainties) 
have been adequately described; and (b) the source of the historical financial information 
involved has been properly identified. 

E. Written Representation in an Examination and a Review Engagement 

1. The practitioner should request the following written r^resentations (in addition to those 
identified in other relevant AT-C sections): 

a. That management is responsible for the underlying assumptions used; 

b. That the assumptions are factually supportable (rneaning that they are supported by the 
"preponderance" of the information); 

c. That the assumptions (a) provide a reasonable basis for-presenting the significant effects, 
(b) the related adjustments properly reflect those assumptions, and (c) the pro forma 
amounts properly reflect those adjustments to the historical financial statements; 

d. That the pro forma adjustments are consistent with the entity's applicable financial 
reporting framework; and 

e. That the pro forma financial information is properly presented with proper disclosure of 
the significant effects directly attributable to the transaction/event involved. 

2. Management's refusal to provide the requested written representations is a scope limitation 
sufficient to cause the practitioner to withdraw from the examination or review engagement. 
There is no alternative for obtaining the requested written representations from management 
for an engagement to examine or review pro forma financial information. 
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1. A title that includes the word "independent"; 

2. An appropriate addressee; 

3. Reference to the pro forma adjustments included; 

4. Reference to management's description of the transaction (or event); 

5. Description of the pro forma financial Information being reported on; 

6. identification of the criteria used to evaluate the pro forma financial information; 

7. Reference to the financial statements from which the historical financial information is 
derived (refer to any modification of the auditor's report); 

8. Statement that the pro forma adjustments are based on management's assumptions; 

9. A statement to identify management's responsibility and to identify the practitioner's 
responsibility to express an opinion; 

10. A statement that the examination was conducted in accordance with attestation standards 
established by the AlCPA and other statements describing the examination engagement; 

11. A statement describing the objectives and limitations of pro forma financial information; 

12. An opinion whether management's assumptions provide a reasonable basis for presenting 
the significant effects and whether the pro forma adjustments give appropriate effect 

to those assumptions and the pro forma amounts reflect the proper adjustments to the 
historical financial statement amounts; 

13. The signature of the practitioner's firm; 

14. The city and state where the practitioner practices; and 

15. The date of the report. 

6. Review Report 

1. A title that includes the word "independent"; 

2. An appropriate addressee; 

3. Reference to the pro forma adjustments included; 

4. Reference to management's description of the tralisaction (or event); 

5. A description of the pro forma financial information being reported on; 

6. Identification of the criteria used to evaluate the proforma financial information; 

7. Reference to the financial statements from which the historical financial information is derived 
(the practitioner should state whether the financial statements were audited or reviewed and 
identify any modification of such report); ^ 

8. A statement that the pro forma adjustrnents are based on management's assumptions; 

9. A statement to identify management's responsibility and to identify the practitioner's 
responsibility to express a conclusion; 

10. A statement that the review was conducted In accordance with attestation standards 
established by the AlCPA and other statements describing the review engagement; 

11. A statement describing the objectives and limitations of pro forma financial information; 

12. A conclusion whether the practitionerls aware of any material modifications that should be 
made to: (a) management's assumptions for themto provide a reasonable basis for presenting 
the significant effects, (b) the proforma adjustments for them to give appropriate effect to 
those assumptions, and (c) the proforma amounts for them to reflect the proper adjustments 
to the historical financial statement amounts; 
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13. The signature of the practitioner's firm; 

14. The city and state where the practitioner practices; and 

15. The date of the report. 

C AT-C 310 provides examples of an unmodified examination report and an unmodified review 
report on pro forma financial information. 



Example 1 

Practitioner's Examination Report on Pro Forma Financial information: 
Unmodified Opinion 


Independent Accountant's Report 


[Appropriate Addressee] 


We have examined the pro forma adjustments giving effect to the underlying transaction (or event) 
described in Note 1 and the application of those adjustments to the historical amounts in the 
accompanying pro forma condensed bajance sheet of X Company as of December 31,20X1, and 
the related pro forma condensed statement of Income for the year then ended (pro forma financial 
information), based on the criteria in Note 1 .The historical condensed financial statements are 
derived from the historical financial statements of X Company, which were audited by us, and of Y 
Company, which were audited by other accountants, appearing elsewhere herein [or "and are readily 
available"].lhe pro forma adjustments are based on management’s assumptions described in Note 1. 

X Company's management is responsible for the pro forma financial information. Our responsibility Is 
to express an opinion on the pro forma financial information based on our examination. 

Our examination was conducted in accordance with attestation standards established by the 
American Institute of Certified Public Accountants. Those standards require that we plan and perform 
the examination to obtain reasonable assurance about whether, based on the criteria in Note 1, 
management's assumptions provide a reasonable basis for presenting the significant effects directly 
attributable to the underlying transaction (or event), and, in all materia! respects, the related pro forma 
adjustments give appropriate effect to those assumptions, and the pro forma amounts reflect the 
proper application of those adjustments to the historical financial statement amounts. An examination 
involves performing procedures to obtain evidence about management's assumptions, the related 
pro forma adjustments, and the pro forma amounts in the pro forma condensed balance sheet of X 
Company as of December 31,20X1, and the related pro forma condensed statement of income for the 
year then ended. The nature, timing, and extent of the procedu^ selected depend on our judgment, 
including an assessment of the risks of materia! misstatement of the pro forma financial Information, 
whether due to fraud or error. We believe that the evidence we obtained is sufficient and appropriate 
to provide a reasonable basis for our opinion. " 

The objective of this pro forma financial information Is to show what the significant effects on the 
historical financial information might have been had the underlying transaction (or event) occurred at 
an earlier date. However, the pro forma condensed finandai^st^ements are not necessarily indicative 
of the results of operations or related effects on flnaihcjal position that would have been attained had 
the above-mentioned transaction (or event) actually occurred at such earlier date. 

In our opinion, based on the criteria in Note 1, management's assumptions provide a reasonable 
basis for presenting the significant effects directly attributable to the above-mentioned transaction 
(or event) described in Note 1, and, in all material respects, the related pro forma adjustments give 
appropriate effect to those assumptions, and the pro forma amounts reflect the proper application of 
those adjustments to the historical financial statement amounts in the pro forma condensed balance 
sheet of X Company as of December 31,20X1, and the related pro forma condensed statement of 
Income for the year then ended. 

[Practitioner's signature] 

[Practitioner's city and state] 

[Date of practitioner's report] 
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Example 2 

^ Pmctitioner's Review Report on Pro Forma Finandal Information: Unmodified Conclusion 

Independent Accountant's Report 

[Appropriate Addressee] 

We have reviewed the pro forma adjustments giving effect to the transaction {or event) described 
in Note 1 and the application of those adjustments to the historical amounts in the accompanying 
pro forrna condensed balance sheet of X Company as of March 31,20X2, and the related pro forma 
condensed statement of income for the three months then ended (pro forma financial information), 
based on the criteria in Note 1. These historical condensed financial statements are derived from 
the historical unaudited financial statementsofX Company, which were reviewed by us, and of Y 
Company, which were reviewed by other accountants, appearing elsewhere herein [or "and are readily 
avai}able"l.‘The pro forma adjustments are based on management's assumptions as described in Note 
I vX Company's management is responsible for the pro forma financial information. Our responsibility 
is to express a conclusion based on our review. 

Our review was conducted in accordance with att^tation standards established by the American 
Institute of Certified Public Accountants. Those standards require that we plan and perform our review 
to obtain limited assurance about whether, based on the criteria In Note 1, any material modifications 
should be made to management's assumptions In order for them to provide a reasonable basis for 
presenting the significant effects directly attributable to the underlying transaction (or event); the 
related pro forma adjustments, in order for them to give appropriate effect to those assumptions; or 
the pro forma amounts, in order for them to reflect the proper application of those adjustments to 
the historical financial statement amounts. A review Is substantially less in scope than an examination, 
the objective of which is to obtain reasonable assurance about whether, based on the criteria, 
management's assumptions provide a reasonable basis for presenting the significant effects directly 
attributable to the underlying transaction (or event), and, in all material respects, the related pro 
forma adjustments give appropriate effect to those assumptions, and the pro forma amounts reflect 
the proper application of those adjustments to the historical financial statement amounts, in order 
to express an opinion. Accordingly, we do not express such an opinion. We believe that our review 
provides a reasonable basis for our conclusion. 

The objective of this pro forma financial information is to show what the significant effects on the 
historical financial information might have been had the underlying transaction (or event) occurred at 
an earlier date. However, the pro forma condensed financial statements are not necessarily indicative 
of the results of operations or related effects on financial position that would have been attained had 
the above-mentioned transaction (or event) actually occurred at such earlier date. 

Based on our review, we are not aware of any rhaterial modifications that should be made to 
management's assumptions in order for them to provide a reasonable basis for presenting the : 
significant effects directly attributable to the above-mentioned transaction (or event) described 
in Note 1, the related pro forma adjustments in or^de'r for them to give appropriate effoct to those 
assumptions, or the pro forma amounts, in order fprrthem to reflect the proper application of those 
adjustments to the historical financial statement amounts in the pro forma condensed balance sheet : 
of X Company as of March 31,20X2, and the related proforma condensed statement of income for the 
three months then ended, based on the criteria in Note 1. 


[Practitioner's signature] 
[Practitioner's city and state] 
[Date of practitioner's report] 
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;r studying th^ 9 Sson, youshouid be able to: 

Identify the tvA^ipds of engagements;^ar conriplianee attestation under the clarified attestation 
standards. 

Understand^^faCtitjoher's responsibilities fn^^rtnihg each of. those types of engagements 
regarding co^Jance attestation, iriejuding recpgnteingihe elements that are required in a' 
practitioner^^pmmation or agreed-upon praCedums report bn^c^ 


li. Examination Engagements 

A. Preconditions (in addition to those identified in other relevant AT-C sections) 

1. Management accepts responsibility for compliance writh specified requirements and the 
entity's internal control over compliance; and 

2. Management evaluates the entity's compliance with specified requirements. 

B. Practitioner Should Request a Written Assertion from Management —If management refuses, 
the practitioner should withdraw from the engagement when that Is permissible. 

C. Examination Procedures 

1. The practitioner should obtain an understanding of the specified requirements, including: 

a. Consideration of laws, regulations, rules, contracts, and grants relevant to the specified 
requirements; 

b. Consideration of knowledge obtained through prior engagements and regulatory 
reports; and 

c. Discussion with appropriate personnel within the entity. 

2. When the entity Involved has operations in several components —The practitioner should 
determine the nature, timing, and extent of testing at the individual components. 

3. Interna! control over compliance —The practitioner should obtain an understanding of 
Internal control over compliance and assess the risks of material noncompliance; should 
consider the kinds of potential noncompliance and design appropriate tests of compliance. 
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I. Definitions 


Definitions 

Compliance with SpecifiedRequirements'/fi^n entity's compliance with specified laws, regulations, rules, 
cohtfacts> or grants." 

Material Ndncompliance:‘% failure to follow compliance requirements or a. violatiort of prohibitions 
included In the specified requirements that results In noncompliance that is qMantItatively or 
qualitatively niaterial, either individually or when aggregated with other honcompliance." 

Applicability: AT-C 31.5, Compliance Attestation, applies to examination or agreed-upon procedures 
reports dated on or after May 1, 2017, related to compliance with specified requirements (or agreedr 
upon procedures related to internal control over compliance). 

The practitioner may be engaged to report directly on the subject matter (compliance), on 
managefnent's assertion about compliance, or on internal control over compliance. 






Forming Conclusions and Reporting 


4. Compliance with regulatory requirements —The practitioner should review reports and 
communications involving the regulatory agencies; may make inquiries of the regulatory 
agencies (e.g., about any examinations in progress). 

D. Written Representations in an Examination Engagement 

1. The practitioner should request written representations from management (in addition to 
those required by AT-C 205) that; 

a. Management takes responsibility for internal control over compliance; 

b. Management has performed an evaluation of the entity's compliance with specified 
requirements; ond 

c. Management has provided Its interpretation of any compliance requirements that are 
subject to different interpretations. 

2. Management's refusal to furnish the required written representations is a scope limitation 
sufficient to preclude an unmodified opinion and may warrant withdrawal when that is 
permitted; there Is no alternative to obtaining the required written representations (as 
discussed in AT-C 205). 

E. Content of the Practitioner's Examination Report 

1. A title that includes the word "Independent"; 

2. An appropriate addressee; 

3. identification of the compliance matters being reported on (or the assertion involved); 

4. Identification of the specified requirements; should also identify the criteria, if those criteria 
are not included in the compliance requirement; 

5. Statement identifying management's responsibility for compliance and the practitioner's 
responsibility to express an opinion; 

6. Statement that the examination was conducted in accordance with attestation standards 
established by the AlCPA and other statements describing the examination engagement; 

7. Statement describing the nature of an examination engagement; 

8. Statement that describes any significant inherent limitations; 

9. Statement that the examination does not provide a legal determination; 

10. An opinion whether the entity complied with the s^clfied requirements, in all material 
respects, or whether management's assertion is fairly stated; 

11. The signature of the practitioner's firm; 

12. The city and state where the practitioner practices; ond 

13. The date of the report. 

F. AT-C 315 provides example of an unmodified e)<afnination report on compliance, which is 
presented below near the end of these materials. 

in. Agreed-Upon Procedures Engagements 

A. Preconditions (in addition to those identified In other relevant AT-C sections) 

1. Management accepts responsibility for compliance with specified requirements and the 
entity's internal control over compliance; crnd 

2. Management evaluates the entity's compliance with specified requirements. 

B. Written Representations In an Agreed-Upon Procedures Engagement—The practitioner 
should request written representations from management (in addition to those required by AT-C 
215) that: 

1. Management takes responsibility for Internal control over compliance; 
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2. Management has performed an evaluation of the entity's compliance with specified 
requirements or internal control over compliance; 

3. Management has provided Its interpretation of any compliance requirements that are subject 
to different interpretations; and 

4. Management has disclosed any known noncompliance occurring subsequent to the period 
covered by the practitioner's report. 

C. Content of the Practitioner's Agreed-lipon Procedures Report 

1. A title that includes the word "independent"; 

2. An appropriate addressee; 

3. Identification of the specified requirements being reported on; 

4. Statement identifying management's responsibility for compliance with the specified 
requirements; 

5. Identification of the specified parties; 

6. Statement that the specified parties are responsible for the sufficiency of the procedures 
performed; 

7. A list of the procedures performed (or reference to them) and the findings; 

8. A description of any agreed-upon materiality limits, if applicable; 

9. Statement that the agreed-upon procedures engagement was conducted in accordance with 
attestation standards established by the AlCPA and other statements pointing out that it was 
not an examination or a review and Include a disclaimer of opinion or any other conclusion; 

10. A description of the assistance provided by a practitioner's external specialist, if applicable; 

11. Any reservations about the procedures or findings, if applicable; 

12. An alert that restricts the use of the report to specified users; 

13. The signature of the practitioner's firm; 

14. The city and state where the practitioner practices; and 

15. The date of the report. 

D. AT-C 315 provides examples of an unmodified examination report on compliance and an agreed- 

upon procedures report on compliance, which follow. 






Exampti^^ 

K Prac^omr's^xdminM&i^t^^on^omli 



The followina is an illustrative practitioner's examination report for an engagement in which the 
pracntioner is reporting on subject matter (an entity's compliance with specified requirements 
during a period of time). 


Independent Accountant's Report 


> t tropriate addressee] 


V. 0 1 Kive examined XYZ Company's compliance with \fdentify the specified requirements, for example 
f \ ’(.quirementshsted in Attachment 1\ during the period J.inuary 1.20X1, to December 31,20X3 
M It ■..•qement of XYZ Company is responsible for XYZ Company's compliance with the speafied 
ri'jhi'ements Our responsibility is to express an opm on on XY7 Company's compliance with the 
S| ^. fled requirements based c n our examination 
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Our examination was conducted in accordance wlth:attestation standards established by the American 
Institute of Certified Public Accountants.Those standards require that we plan and perform the 
examination to obtain reasonable assurance about whether XYZ Company complied, in all material 
respects, with the specified requirements referenced above. An examination involves performing 
procedures to obtain evidence about whether XYZ Company complied with the specified requirements. 
The nature, timing, and extent of the procedures selected depend on our judgment, including an 
assessment of the risks of materia! noncompliance, whether due to fraud or error. We believe that the 
evidence we obtained is sufficient and appropriate to provide a reasonable basis for our opinion. 

Our examination does not provide a legal determination on XYZ Company's compliance with specified 
requirements. 

In our opinion, XYZ Company complied, in all material respects, with {/denf/^r the spec/f/ed 
requirements;e.g., the requirements listed in Attachment 1] during the period January 1,20X1, to 
December 31,20X1. 

[Practitioner's signature] 

[Practitioner's city and state] 

[Date of practitioner's report] 




Example 2 

► Practitioner's Agreed-Upon Procedures Report Related to Compliance 


The following is an illustrative practitioner's agreed-upon procedures report related to an entity's 
compliance with specified requirements In which the procedures and findings are enumerated 
rather than referenced. 


Independent Accountant's Report on Applying Agreed-Upon Procedures 


[Appropriate Addressee] 

We have performed the procedures enumerated below, which were agreed to by [identify the specified 
parties; e.g., the management and board of directors of XYZ Company], related to XYZ Company's 
compliance with [identify the specified requirements; e.g., the requirements listed in Attachment 1] during 
the period January 1,20X1, to December 31,20X1], XYZ Company's management is responsible for Its 
compliance with those requirements. The sufficiency of these procedures is solely the responsibility 
of those parties specified in this report. Consequently, we make no representations regarding the 
sufficiency of the procedures enumerated beloW either for the purpose for which this report has been 
requested or for any other purpose. ^ 

[Include paragraphs to enumerate procedures and findings.]' ''' 

This agreed-upon procedures engagement was conducted in accordance with attestation standards 
established by the American Institute of Certlfied>Ptjfilc Accountants. We were not engaged to and 
did not conduct an examination or review, the objective of which would be the expression of an 
opinion or conclusion, respectively, on compliance with specified requirements. Accordingly, we do 
not express such an opinion or conclusion. Had we performed additional procedures, other matters 
might have come to our attention that would have been reported to you. 

This report is intended soiely for the information and use of [identify the specified parties; e.g., the 
management and board of directors of XYZ Company] and Is not intended to be, and should not be, 
used by anyone other than the specified parties. 

[Practitioner's signature] 

[Practitioner's city and state] , 

[Date of practitioner's report] 
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Management's Discussion and Analysis (MD&A) 


After studying this lesson, you should be able to: 

1. Identify the two kindsBfattistatlon e^ presentations under the clarified 

attestation.stahdards;-^t;SS?#%';"^^ 

2. Identify the three specific matters addressed by thfepractftioner's opinion (for an examination) or 
conclusion (for a review) regarding MD&A presentations under the clarified attestation standards. 

3. identify the feiir assertions that are implicitiy assoaStd^ wit^ MD&A presentations. 


the Auditing Standards Board Issued the clarified attestation standards, the ASB decided to 
the "old" guidance with respect to attestation engagements involving MD&A presentations. 
fRathir than issue "clarified" guidance applicable to MD&A presentations, the ASB simply designated 
the existing guidance as AT-C Section SQS.Hte justification was provided in a note that follows: 

"The Auditing Standards Board (ASB) has not clarified AT section 701 because practitioners rarely 
perform attest engagements to report on management's discussion and analysis prepared pursuant to 
the rules and regulations adopted by the U.S. Securities and Exchange Commission. Therefore, the ASB 
decided that it would retain AT section 701 In its current unclarified format as section 395 until further 
notice." 


I. Applicability 

A, When attesting to MD&A that has been prepared according to the requirements of the SEC and 
that MD&A is presented in annual reports or in other documents. 

B. Can even apply to a nonpublic entity that provides a written assertion that the SEC requirements 
were used as criteria for the presentation of the MD&A. 

1. Precondition to accept an MD&A engagement —Must have audited the annual financials 
for the latest period applicable to the MD&A presentation; any other financials involved must 
have been audited (or at least reviewed if interim/quarterly financials) by the practitioner or a 
predecessor auditor. 

II. Examination of MD&A—Results in Positive Assurance 

A. Purpose— To express an opinion on whether: 

1 . Required elements —The presentation includes the elements required by the SEC: 

a. Discussion of financial condition (liquidity and capital resources); 

b. Discussion of changes in financial condition; 

c. Discussion of results of operations. 

2. Historical amounts— The historical financial amounts are accurately derived from the 
financials. 

3. Basis for conclusions—The underlying information, assumptions, etc., provide a reasonable 
basis for the disclosures within the MD&A. 

B. Four Assertions Implicitly Embodied in the MD&A Presentation 

1. Occurrence—Whether reported events actually occurred during the period. 

2. Consistency with the financials —Whether historical amounts have been accurately derived 
from the financials. 

3. Completeness of the explanation —Whether the description of matters comprising the 
MD&A presentation is complete. 
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4. Presentation and disclosure—Whether Information in the MD&A is properly classified, 
described, and disclosed. 

C. Primary Dimensions of an Examination of MD&A 

1. Planning the examination (similar to an audit engagement)—Develop an overall strategy 
that limits "attestation risk" to an acceptably low level. 

a. Inherent risk—Varies with the assertion Involved. 

b. Control risk (same as previously discussed). 

c. Detection risk (same as previously discussed). 

2. Consideration of internal control applicable to MD&A (similar to an audit)—Pertains 
to assessment of control risk, documenting the understanding, and communication of 
significant deficiencies. 

3. Obtain sufficient evidence —Varies with the circumstances but includes reading the MD&A 
for consistency with the financials, examining related documents, reading minutes, reading 
communications from the SEC, and obtaining written representations from management, 
among other things. 

4. Consideration of subsequent events (SEC expects MD&A to reflect events at or near the 
filing date)—Read minutes and available interim financials; make inquiries of management 
and obtain appropriate representations In writing. 

D. Reporting on MD&A— Financial statements with the auditor's report should accompany the 
document containing the MD&A (or be incorporated by reference to documents filed with the 
SEC). 

1. Title— "Independent Accountant's Report." 

2. Unmodified examination report— Four paragraphs: 

a. Introductory paragraph (four sentences), 

i. Identify MD&A presentation; 

iL identify management's responsibility; 

Hi. Identify accountant's responsibility; and 
iv. Refer to related audit report. 

b. Scope paragraph —Three sentences: 

i. Refer to attestation standards established by AlCPA; 

ii. Describe scope of examination; and 

iii. Say that examination provides reasonable basis for opinion. 

c. Explanatory paragraph —^Three sentences: 

i. Comment on the need for estimates and assumptions; 

ii. Comment on the role of future expectations; and 

iii. State that actual results may differ. 

d. Opinion paragraph —One long sentence. Indicate whether (1) the presentation includes 
elements required by SEC; (2) the historical amounts are accurately derived; and (3) the 
underlying information and assumptions provide a reasonable basis for the MD&A. 

3. Dating report—As of completion of the examination procedures. 

4. Modifications of the examination report 

a. Reservations as to presentation —Results in a qualified or adverse opinion. 
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b. Reservations as to scope—Results in a qualified opinion or a disclaimer of opinion. 

c. Division of responsibility—May refer to another practitioner's report on MD&A for a 
specific component as a partial basis for one's own report. 

d. Emphasisof a matter—Presented as a separate paragraph {e.g., information included 
beyond the SEC's requirements). 


Sample Examination Report on (Annual) MD&A when Reporting Directly on the Subject Matter, 

Not on Management's Assertion 

Independent Accountant's Report 

(Introductory paragraph) 

We have examined ABC Company's Management's Discussion and Analysis taken as a whole, 

Included (incorporated by reference) in the Company's (Insert description of registration statement 
or document). Management is responsible for the preparation of the Company's Management's 
Discussion and Analysis pursuant to the rules and regulations adopted by the Securities and 
Exchange Commission. Our responsibiffty Is to express an opinion on the presentation based on 
our examination. We have audited, in accordance with auditing standards generally accepted in the 
United States of America, the financial statements of ABC Company as of December 31,20X3 and 
20X2, and for each of the years in the three-year period ended December 31,20X3, and in our report 
dated (Month and day], 20X4, we expressed an unqualified opinion on those financial statements. 

(Scope paragraph] 

Our examination of Management's Discussion and Analysis was conducted in accordance with 
attestation standards established by the American Institute of Certified Public Accountants and, 
accordingly, included examining, on a test basis, evidence supporting the historical amounts and 
disclosures in the presentation. An examination also Includes assessing the significant determinations 
made by management as to the relevancy of information to be included and the estimates and 
assumptions that affect reported information. We believe that our examination provides a reasonable 
basis for our opinion. 

(Explanatory paragraph) 

The preparation of Management's Discussion and Analysis requires management to interpret the 
criteria, make determinations as to the relevancy of Information be included, and make estimates 
and assumptions that affect reported information. Management's Discussion and Analysis includes 
information regarding the estimated future impact of transactions and events that have occurred or are 
expected to occur, expected sources of liquidity and capital resources, operating trends, commitments, 
and uncertainties. Actual results in the future may differ materially from management's present 
assessment of this information because events and circurnstances frequently do not occur as expected. 

(Opinion paragraph) ' 

In our opinion, the Company's presentation of Management's Discussion and Analysis includes, in all 
material respects, the required elements of the rules and regulations adopted by the Securities and 
Exchange Commission; the historical financial amounts included therein have been accurately derived, 
in all material respects, from the Company's financial statements; and the underlying information, 
determinations, estimates, and assumptions of the Company provide a reasonable basis for the 
disclosures contained therein. 

(Signature) 

(Practitioner's city and state) 

(Date) 
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Review of MD&A—Results in Negative Assurance 

A. Purpose—To report whether the practitioner has any reason to believe that: 

1. The presentation does not Include the elements required by the SEC; 

2. The historical financial amounts are not accurately derived from the financials; and 

3. The underlying information, assumptions, etc., do not provide a reasonable basis for the 
disclosures within the MD&A. 

B. Primary Dimensions of a Review of MD&A 

1. Obtain an understanding of the SEC requirements regarding MD&A. 

2. Plan the engagement —Develop an overall strategy; 

3. Consider relevant portions of internal control affecting MD&A presentation; 

4. Apply analytical procedures and make inquiries of management (usually do not have to obtain 
corroboration); 

5. Consider subsequent events; and 

6. Obtain written representations from management. 

C. Unmodified Review Report— Usually consists of five paragraphs (if including a restricted- 
use paragraph at the end of the report); the accountantmay review the entity's annual MD&A 
presentation or an interim MD&A presentation. 

1. Title —"independent Accountant's Report" 

2. Introductory paragraph— ^Three sentences. Delete the sentence on accountant's 
responsibility and 

a. Identify MD&A presentation; 

b. Identify management's responsibility; and 

c. Refer to related audit report. 

3. Scope paragraph —Four sentences. Add a disclaimer: 

a. Refer to attestation standards established by the AlCPA; 

b. Describe a review engagement; 

c. Say that scope is less than that of an examination; and 

d. Disclaim an opinion. 

4. Explanatory paragraph— Three sentences. Same as for an examination report: 

a. Comment on the need for estimates and assumptions; 

b. Comment on the role of future expectations; dnd 

c. State that actual results may differ, -r" ' 

5. Conclusions paragraph— One long sentence. Negative assurance as to whether presentation 
does not include elements required by SEC, historical amounts are not accurately derived, and 
underlying information and assumptions do not provide a reasonable basis for the MD&A. 

6. Restricted-use paragraph —One sentence. Restrict the distribution when the MD&A 
presentation and the practitioner's report are not intended to be filed with the SEC under the 
1933 and 1934 Securities Acts. 

7. Dating report—As of completion of the review procedures. 

8. Changes to the usual review report —Reservations as to presentation resulting in a qualified 
review report; reference to other practitioners; or emphasis of a matter. 
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After studying this lesson, you should be able to: 

1. Know the definition of^assurance services"and understand the distinction betweGn'''auditing;' , 

. ”3ttestation"and"assurance^'’^:5'2,-i:v:^-.:':':V:?..ii^M;;^^ JS 

2. Familiarize yourself vvMi the AlCPA's established assurance services, including WebTrust, SysTrust, 

3. Recognize the"Assurance Sei^ices E>tecutj\^ Cbm^ittee*^as the AlCPA senior committee with - 

responsibility for identifying evolving assurance ppportuhities and for developing criteria and 
guidance to support these AlCPA Initiatives;: 


Definition 

ASsuranceSerWcesj ih^ependent profession|j services that improve the quality or context i’t 
information for decision makers. (Quality includes the re//u6/7/iy and re/eVunce of information and 
confexf refers to how the decision maker uses the information.) 


I. Relationship of Assurance to Auditing and Attestation— Auditing and attestation both involve 
enhancing the reliability of information (auditing specifically focuses on historical financial statement 
subject matter, whereas attestation is not limited to financial statements subject matter); assurance is 
broader than attestation, since assurance may address the relevance of Information in addition to the 
reliability of information. 



II. AlCPA Assurance Services 

A. Trust Services— The AlCPA and Canadian Institute of Chartered Accountants developed SysTrust 
(to provide assurance on systems generating information and representations generally) and 
WebTrust (to provide assurance specifically related to e-commerce activities). 

1. Five principles and criteria associated with Trust.Services (these are organized in four broad 

areas: policies, communications, procedures, &nd monitoring): 

a. Security— The system is protected frorfi unauthorized access. 

b. Availability —The system is available for operation and use as committed or agreed. 

c. Processing integrity— System processing Is complete, accurate, timely, and authorized. 

d. Confidentiality—Information designated as confidential Is protected as committed or 
agreed. 

e. Privacy—Personal information is collected, used, retained, and disclosed in conformity 
with the commitments in the entity's privacy notice and with criteria set forth in generally 
accepted privacy principles issued by the AlCPA/CICA. 
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2. WebTrust—^To earn the WebTrust seal (which provides assurance to participants about 
transaction integrity and information security in e-commerce transactions with an entity's 
Web site), the entity must comply with all five of the principles above and engage a 
CPA-licensed professional to provide WebTrust-related services; the seal displays a digital 
certificate and can be displayed until the designated expiration date (the WebTrust seal is 
managed by a third-party seal manager). 

3. SysTrust—To earn the CPA's unqualified opinion for a SysTrust engagement, an entity's 
system would also have to meet the above Trust Services principles; the SysTrust engagement 
would evaluate management's written assertions about the effectiveness of controls over the 
entity's system relative to applicable attestation standards. 

B. PrimePlus (formerly known as ElderCare) Services— PrimePlus has a connotation primarily 
involving financial/lifestyle planning Issues, whereas ElderCare has a connotation primarily 
involving healthcare (the AlCPA says It will continue to support both brands). 


"Definition^ 

PrimePlus/ElderCare Services^ unique -professional services—both 

financial and nonfinanci?ij—jRtend^4to^^^^^ffiilt'!^^'B^W,fora5 longas possible, then 

desired lifestyle and finaodai4ndep€^de^^^^^^;^s4^S'“" 


1. Financial services include the following; receiving, disposing, and accounting for client 
receipts; making bill payments and handling banking services; submitting claims to insurance 
companies; estate planning; providing tax planning and tax return preparation; evaluating 
investments and trust activity; managing portfolios; protecting elderly from predators; etc. 

2. Nonfinancial services include the following: coordinating support and healthcare services; 
communicating family expectations to care providers; managing real estate and other 
assets; establishing performance monitoring systems; managing real estate and other assets; 
coordinating services involving healthcare, legal, and other professionals; etc. 

3. Markets for PrimePlus/ElderCare services—There are three primary markets: (a) older clients 
themselves; (b) children of older adults; and (c) other professionals who deal with those older 
adults (such as lawyers and healthcare professionals). 

C. The AlCPA has established a senior committee known as the Assurance Services Executive 

Committee (ASEC) to oversee the ongoing development of assurance services. 

1. ASEC's role—To identify trends and assurance opportunities; to develop assurance guidance 
(including applicable criteria); to communicate those opportunities and guidance to AlCPA 
members; and to create alliance with Industry, government, or others to facilitate those 
assurance opportunities. 

2. ASEC has appointed several task forces to focus pn developing assurance opportunities: (a) 
XBRL Assurance Task Force (regarding the development of guidance on the assurance of 
XBRL-related documents); (b) Trust/Data Integrity Task Force (regarding the development of 
principles/criteria for assurance on the^cUrlty, availability, process integrity of systems and 
the confidentiality and privacy of information); and (c) Risk Assurance Task Force (regarding 
enterprise risk management Issues). 




lample Repor 


Examination 



Independent Accountant's Report 

Tothe Board of Directors and Stockholders 
f’ABCCompany 

We have examined the accompanying forecasted balance sheet, statements of income; retained : . SI - 
earnings, and cash flows of ABC Company as of December 3 h 2GX1, and for the year then ending. ABC 
Company's management is responsible for the forecast Our responsibility is to express ah opinion on 
is the forecast based on our examination. 

Our examination was conducted in a«xordancG with attestation standards established by the ; 

American institute of Certified Public Accountants and, accordingly, included such procedures as we 
considered necessary to evaluate both the assumptions used by management and the preparatiph 
and presentation of the forecast. We believe that our examination provides a reasonable basis for our . 
opinion. 

In our opinion, the accompanying forecast is presented in conformity with guidelines for ptesentatlori : 
of a forecast established by the American Institute of Certified Public Accountants, and the undeflying, 
assumptions provide a reasonable basis for management's forecast However, there usually Will be ,, 
differences between the forecasted and actual results, because events and circumstances frequeritly 
do hot occur as expected, and those differences may be material. We have no responsibility to update 
this. report for events and circumstances occurring after the date of this report 



Date (usually the last day of fieldwork) 
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Sample Agreed-Upon Procedures Report on Forecast Financial information 
independent Accountant's Report on Applying Agreed-Upon Procedures 

Board of Directors—XYZ Corporation 
Board of Directors—ABC Company 

At your request, we have performed certain agreed-upon procedures, as enumerated below, with 
respect to the forecasted balance sheet and the related forecasted statements of income, retained 
earnings, and cash flows of DEF Company, a subsidiary of ABC Company, as of December 31,20XX, 
and for the year then ending. These procedures, which were agreed to by the Boards of Directors of 
XYZ Corporation and ABC Company, were performed solely to assist you in evaluating the forecast in 
connection with the proposed sale of DEF Company to XYZ Corporation. DEF Company's management 
is responsible for the forecast. 

This agreed-upon procedures engagement was conducted in accordance with attestation 
standards established by the American Institute of Certified Public Accountants. The sufficiency 
of these procedures is solely the responsibility of the specified parties. Consequently, we make no 
representation regarding the sufficiency of the procedures described below either for the purpose for 
which this report has been requested or for any other purpose. 

[Include paragraphs to enumerate (or reference) procedures and findings] 

We were not engaged to and did not conduct an examination, the objective of which would be the . 

expression of an opinion on the accompanying prospective financial statements. Accordingly, we do 
not express an opinion on whether the prospective financial statements are presented in conformity 
with AiCPA presentation guidelines or on whetherthe underlying assumptions provide a reasonable 
basis for the presentation. Flad we performed additional procedures, other matters might have come 
to our attention that would have been reported to you. Furthermore, there will usually be differences 
between the forecasted and actual results, because events and circumstances frequently do not occur 
as expected, and those differences may be material. We have no responsibility to update this report for 
events and circumstances occurring afterthe date of this report. 

This report is Intended solely for the information and use oTfhe Boards of Directors of ABC Company 
and XYZ Corporation and is not intended to be and should not be used by anyone otherthan these 
specified parties. ; ^ 

/s/CPA firm (signed by engagement partner) / 

Date (usually the last day of fieldwork) > " 




We have compiled the accorn 
earnings, and cash flows of A£ 
in accordance with attestatior 
Accountants. 


A compilation is 
of management 
forecast. We havejp^^^ 
form of assurancepnph,^ 
|iifferences betw^ jhe|p 
do not occur as e)g^t^P 
this report for ev^s|nid( 


^any other 


ptions Purthermore, there us 
'eventsand< aw t'n >.0 
r^lW^h^ve no responsibility 
teofthi' up >f 











independent Accountant's Report 

We have examined the pro forma adjustments reflecting the transactions Cor event] described in 
Note 1 and the application of those adjustments tothe historical amounts in the accompanying pro 
forma financial condensed balance sheet of ABC Company as. of December 31 > 20X1, and the pro 
forma condensed statement of income for the yearthen ended. The historicai condensed financial 
Statements are derived from the historical financial statements of ABC Company, which were audited 
by us, and of XYZ Corhpany, which were audited by other accountants, appearing elsewhere herein. 

Such pro forrha adjustments are based upon management's assumptions described In Note 2. ABC 
Company's management is responsible for the pro forma financial Information. Our responsibility js to 
express an opinion on the pro forma financial information based on our examination. : : 

Our examination was conducted in accordance with attestation standards established by the 
American Institute of Certified Public Accountants and, accordingly, included such procedures as we 
considered necessary In the circumstances. We believe that our examination provides a reasonable 
basis for our opinion. 

The objective of this proforma financial Information is to show what the significant elTects on the 
historical financial Information might have been had the transaction [or event] occurred at an earlier 
date. However, the pro forma condensed financial statements are not necessarily indicative of the 
. results of operations or related effects on financial position that would have been attained had the 
above-mentioned transaction [or event] actually occurred earlier. 

In our opinion, management's assumptions provide a reasonable basis for presenting the sighificaht 
effects directly attributable to the above-mentioned transaction [or event] described in Note 1, the 
related pro forma adjustments give appropriate effect to those assumptions, and the pro forma 
column reflects the proper application of those adjustments to the historical financial statement 
amounts in the pro forma condensed balance sheet as of December 31,20X1, and the pro forma 
condensed statement of income for the year then ended. 

/s/CPA firm (signed by engagement partner) 

Date ^ 


Note 

Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the subject 
matter.' 
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Independent Accountant's Report 

We have reviewed the pro forma adjustments reflecting the transactions [or event] described In 
Note 1 and the application of those adjustments to the historical amounts in the accornpanying 
pro forma financial condensed balance sheet of XYZ Company as of March 31,20X2, and the pro 
forma condensed statement of income for the three months then ended. The historical condensed 
financial statements are derived from the historical unaudited finahclai statements of XYZ Company, 
which were reviewed by us, and of ABC Company, which were reviewed by other accountants, 
appearing elsewhere herein. Such pro forma adjusbnents are based upon management's 
assumptions described in Note 2. XYZ Company's managemeiit Is responsible for the pro forma 
financiaiinformation. 


Our review was conducted in accordance with attestation standards established by the American 
Institute of Certified Public Accountants. A review Is substantially less in scope than an examination, 
the objective of which is the expression of an opinion on management's assumptions, the pro forma 
adjustments and the application of-tfiose adjustments to historical financial information; Accordingly, 
we do not express such an opinion. 


The objective of this pro forma financial information Is to show what the significant efl^ects on the 
historical financial information might have been had the transaction [or event] occurred at an earlier 
date. However, the pro forma condensed financial statements are not necessarily indicative of the , 
results of operations or related effects on financial position that would have been attained had the 
above-mentioned transaction [or event] actually occurred earlier. 

Based on our review, nothing came to our attention that caused us to believe that management's 
assumptions do not provide a reasonable basis for presenting the significant effects directly 
attributable to the above-mentioned transaction [or event] described in Note 1, that the related pro 
forma adjustments do not give appropriate effect to those assumptions, or that the pro forma column 
does not reflect the proper application of those adjustments to the historical financial statement 
amounts in the pro forma condensed balance sheet as of March 31,20X2, and the pro forma 
condensed statement of income for the three months then ended. 


Date (usually the last day of fieldwork) 


Note ■ 

Additional paragraph(s) may be added to emphasize certain matters relating to the attest engagement or the subject 
matter. 
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Examinati( 


Independent Accountanl's Report 

11 '/pev^rruned inanrtgements assertion about (nameofenw>j«c'^'Oi n im t i,«iLh (/istspect'*^ 

I M'prprequ/remenrsl during the u?er/od) ended <d(3/r)incLdp ontpanyiiiq (r/f/p 

' ' i^enentreport) Managementisresponsiblefoi t^anipoi eniity'«coiiiplidn'"^'‘»iththc'i«. 

, jUir.ments Our responsibility is to express an opinion on rmnagement's assertion ah^>ui the 
Co pany s compliance based on our examination 

Our examination Wd ridd' ir ((onltina withslu.iCiardje«TabirhedbytneAmeii(.aninstituteof 
Certified Public Accountants and, accordingly included examining, on a test basis eviufti hm 
(rtameofentityys compliance with those requirLr'''n'^ and performing such oihzr p")cedui«.5 as vv** 
fopsiciereu i lecessai > in the circumstances We believe that our examination provides t r®^^^in^hle 
bistsf t II ^nnn Oi r(xjininationdoesnotprovidealegaldeterminationQn(nomcofci2.«» ^ 
compliance with specified requirements. * V 

' our opinion, management's assertion (identifymanagement's assertion—for example .i 
CcnpanycompHedwIththeafoiementionedreQUirementsfortheyearendedDecemberSI i m 
stated, in all material respects ^ 

/s/ CPAfirrn (signed by engagementpartner) 

::Oate (usually the last day of fieldwork) 
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Independent Accountant's Report 

iTotjiieAuditCommitteesandlV!anagGmentsofABCInc.ahdXYZFund 

" We have performed the procedures enumerated beloWy which vyefe agreed to by the audi I 
committees and managements of ABC Inc. and XYZ Fund, solely to assist you in evaluating the 
accompanying Statement of Investment Performance Statistics of XYZ Fund (prepared in accordance 
with the criteria specified therein) for the year ended December 31,20X1; XYZ Fund's management i 
is responsible for the statement of investment performance statistics,This agreed-upon procedures 
engagementwas conducted in accordance with attestation standards established by the American 
institute of Certified Public Accountants. The sufficiency of these procedures if spiejy the responsibility 
of those parties specified in this report. Consequently, we make no representation regarding the 
sufficiency of the procedures described below either for the purpose for which this report has been 
requested or for any other purpose. 

We were not engaged to and did not conduct an examination, the objective of which woulcl be the 
expression of an opinion on the accompanying Statement of Investment Performance Statistics of . 

XYZ Fund. Accordingly, we do not express such an opinion. Had we performed additional procedures, 
other matters might have come to our attention that would have been reported to you. \ 

This report is Intended solely for the information and use of the audit committees and managements 
of ABC Inc. and XYZ Fund, and Is not intended to be and should not be used by anyone other than. 
these specified parties. 

/signature/ 

[Date]: 


Note 

Include paragraphs to enumerate procedures and findings —or reference appendix (appendices) where these procedures 
and findings are identified. 
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Example Management Report 
{with 1^0 Material Weaknesses 



Management's Report on internal Control Over Financial Reporting 

ABC Companyi^ interna! control over financial reporting Is a process effected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding 
the preparation ofreliable financial statemQnts in accordance w\th [applicable financial reporting 
framework, such as accounting principles generally accepted in the United States ofAmerIcal An entity's 
internal control over financial reporting Includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions 
and dispositions of the assets of the entity; (2) provide reasonable assurance that transactions are 
recorded as necessary to permit preparation of financial statements In accordance with [appUcable 
financial reporting framework, such as accounting principles generally accepted in the United States of 
America], and that receipts and expenditures of the entity are being made only in accordance with 
authorizations of management and those charged with governance; and (3) provide reasonable 
assurance regarding prevention, pr timely detection and correction, of unauthorized acquisition, use, 
or disposition of the entity's assets that could have a material effect on the financial statements. 

Management of ABC Company is responsible for designing, implementing, and maintaining effective 
internal control over financial reporting. Management assessed the effectiveness of ABC Company's : 
internal control over financial reporting as of December 31,20XX, based on [identify criteria]. Based 
on that assessment, management concluded that, as of December 31,20XX, ABC Company's internal 
control over financial reporting is effective, based on [identify criteria]. 

Internal control over financial reporting has inherent limitations. Internal control over financial ^ . 
reporting is a process that involves human diligence and compliance and is subject to lapses in 
judgment and breakdowns resulting from human failures. Internal control over financial reportihg 
also can be circumvented by collusion or improper management override. Because of its inherent 
limitations, internal control over financial reporting may not prevent, or detect and correct, 
misstatements. Also, projections of any assessment of effectiveness to future periods are subject to 
the risk that controls may become inadequate because of changes in conditions, or that the degree of 
compliance with the policies or procedures may deteriorate. 

ABC Company ^ ' 

[Report signers, if applicable] 

[Date] 






m 
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[Appropriate Addressee] 

Report on Internal Control Over Fmancial Reporting 

We have audited the accompanying financial statements of ABC Company, which comprise 
the balance sheet as of December 31,20XX, and the related statements of income, changes in 
stockholders' equity, and cash flows for the year then ended, and the related notes to the financial 
statements. We have also audited ABC Company's internal control over financial reporting as of 
December 31,20XX, based on [/denf/^cr/fer/a]. 

Management's Responsibility for the Financial Statements and Internal Control Over 
Financial Reporting 

Management is responsible for the preparation and fair presentation of these financial statements 
in accordance with accounting principles generally accepted in the United States of America; this 
includes the design, implementation, and maintenance of effective internal control over financial 
reporting relevant to the preparation and fair presentation of financial statements that are free 
from material misstatement, whether due to fraud or error. Management is also responsible for 
its assessment about the effectiveness of internal control over financial reporting, included in the 
accompanying [title of management's report}. 

Auditor's Responsibility 

Our responsibility is to express an opinion on these financial statements and an opinion on the entity's 
internal control over financial reporting based on our audits. We conducted our audits in accordance 
with auditing standards generally accepted in the United States of America. Those standards require 
that we plan and perform the audits to obtain reasonable assurance about whether the financial 
statements are free from material misstatement and whether effective interna! control over financial 
reporting was maintained in all material respects. 

An audit of financial statements involves performing procedures to obtain audit evidence about the 
amounts and disclosures in the financial statements. The procedures selected depend on the auditor's 
judgment, including the assessment of the risks of material misstatement of the financial statements, 
whether due to fraud or error. In making those risk assessments, the auditor considers internal control 
relevant to the entity's preparation and fair presentation of the financial statements in order to 
design audit procedures that are appropriate In theCircumstances. An audit of financial statements 
also includes evaluating the appropriateness of accounting policies used and the reasonableness of 
significant accounting estimates made by management) as well as evaluating the overall presentation 
of the financial statements. , " . r -" 

An audit of internal control over financial reporting imfd^ves performing procedures to obtain audit 
evidence about whether a material weakness exists. The procedures selected depend on the auditor's 
judgment, including the assessment of the risks that a material weakness exists. An audit includes 
obtaining an understanding of internal control over financial reporting and testing and evaluating the 
design and operating effectiveness of internal control over financial reporting based on the assessed risk. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinions. 

Definition and Inherent Limitations of Internal Control Over Financial Reporting 

An entity's internal control over financial reporting Isa process effected by those charged with 
governance, management, and other personnel, desigried to provide reasonable assurance regarding 
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the preparation of reiiabie financial statements in accordance with {applkabie financial reporting' 
framework, such as accounting principles generally accept^ In the United States of America]. An entity's 
internal control over financial reporting includes those policies and procedures that (1} pertain to ’ 
the maintenance of records that, In reasonable detail, accurately and fairly reflect the transactions 
and dispositions of the assets of the emlly;(2) prqyidereasonable assurance that transactions are 

recorded as necessary to permit preparation of flnandal statements in accordance with Idp^/icobte : 

financial reporting framework, such as accounting principles.generallyaccepted in the United Statespf 
Amer/co], and that receipts and expenditures of the entity are being made only in accordance with : 
authorizations of management and those charged with governance; and (3) provide reasonable 
assurance regarding prevention, or timely detection and correction of unauthorized acquisition, use, 
or disposition of the entity's assets that could have a material effect on the finandai statements. 

Because of its inherent limitations, internal control over finandai reporting may not prevept, or detect 
and correct, misstatements. Also, projections of any assessment of effectiveness to future periods are 
subject to the risk that controls may become Inadequate because of changes ip. conditions, or that the 
degree of compliance with the policies or procedures may deteriorate. 

Opinions -- 

In our opinion, the financial statements referred to above present fairly, in all material respects> the 
financial position of ABC Company as of December 31,20XX,and the results of its operations and.its; 
cash flows for the year then ended in accordance with [applicable financial reporting framework, such 
as accounting principles generally accepted in the United States of America]. Also, in our opinion, ABC: \ 
Company maintained, in all material respects, effective interna! control over finandaf reporting as of ,. V 
December31,20XX, based on [/denf/fycr/ferifl]. T; . . ' 

Report on Other Legal and Regulatory Requirements 

[Form and confenf of this section of the auditor's report will vary depending on the nature of the auditor'^ ■ 
other reporting responsibilities.] 

[Auditor's signature] 

[Auditor's city and state] 

[Date of the auditor's report] 
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[Appropriate Addressee] 

Report on interna! Control Over Financia) Reporting 

We have audited ABC Company's internal control over financial reporting as of December 31,20XX, 
based on [identify criteria]. 

Management's Responsibility for Internal Control Over Financial Reporting 

Management Is responsible for designing, implementing, and maintaining effective internal control 
over financial reporting, and for its assessment about the effectiveness of internal control over 
financial reporting, included in the accompanying [title of management's report]. 

Auditor's Responsibility 

Our responsibility is to express an opinion on the entity's internal control over financial reporting 
based on our audit. We conducted bur audit in accordance with auditing standards generally accepted 
in the United States of America. Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether effective Internal control over financial reporting was maintained 
in all material respects. 

An audit of internal control over financial reporting involves performing procedures to obtain audit 
evidence about whether a material weakness exists.The procedures selected depend on the auditor's 
judgment, including the assessment of the risks that a material weakness exists. An audit includes 
obtaining an understanding of internal control over financial reporting and testing and evaluating the 
design and operating effectiveness of internal control over financial reporting based on the assessed risk. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our audit opinion. 

Definition and Inherent Limitations of Internal Control Over Financial Reporting 

An entity's Internal control over financial reporting is a process effected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding 
the preparation of reliable financial statements in accordance ywth {applicable financial reporting 
framework, such as accounting principles generally accepted in the United States of America]. An entity's 
internal control over financial reporting includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail,,ac6urately and fairly reflect the transactions 
and dispositions of the assets of the entity; (2) provide reasonable assurance that transactions are 
recorded as necessary to permit preparation of financial statements in accordance with [applicable 
financial reporting framework, such as accounting principles' generally accepted in the United States of 
America], and that receipts and expenditures of theentity are being made only in accordance with 
authorizations of management and those charged with' governance; and (3) provide reasonable 
assurance regarding prevention, or timely detection and correction of unauthorized acquisition, use, 
or disposition of the entity's assets that could have a material effect on the financial statements. 

Because of its inherent limitations, internal control over financial reporting may not prevent, or detect 
and correct, misstatements. Also, projections of any assessment of effectiveness to future periods are 
subject to the risk that controls, may become Inadequate because of changes in conditions, or that the 
degree of compliance with the policies or procedures may deteriorate. 

Opinion 

In our opinion, ABC Company maintained, in all material respects, effective internal control over 
financial reporting as of December 31,20XX, based on [identifycriteria]. 
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Rapoit on Ffnandal Stataments 

We also have audited/ in accordance with dudiiitXf stin ) irds qenerally accepted in the United States 
of America, the bdent/j^^niinc/o/sMtemenfs] of ABC t umpeinv andoui report dated [dar<^ of report 
which should be the same as the date of the leport oi ih< auait ofICFR] expressed \fnclude nature of 

Repoit on Other Ugai and Regulatory Requirements 

{Form and content <3f this section of the auditor s n>poi i will vary depending on the nature of the auditor's 
other reporting responMities^ 

[Auditor's signature] 

[Aud/for's afv ond sfote] 







[Appropriate Addressee] 

Report on Internal Control Over Financial Reporting 

We have audited ABC Company's internal control over financial reporting as of December 31,20XX, 
based on [/denf/^cr/ferw]. 

Management's Responsibilltyfor Internal Control Over Financial Reporting 

Management is responsible for designing, Implementing, and maintaining effective internal control 
over financial reporting, and for its assessment about the effectiveness of internal control over 
financial reporting, included in the accompanying [title of management's report]. 

Auditor's Responsibility 

Our responsibility is to express an opinion on the entity's internal control over financial reporting 
based on our audit. We conducted our audit in accordance with auditing standards generally accepted 
in the United States of America.Those standards require that we plan and perform the audit to obtain 
reasonable assurance about whether effective internal control over financial reporting was maintained 
in all material respects. 

An audit of internal control over financial reporting involves performing procedures to obtain audit 
evidence about whether a materia! weakness exists. The procedures selected depend on the auditor's 
judgment, including the assessment of the risks that a material weakness exists. An audit includes 
obtaining an understanding of internal control over financial reporting and testing and evaluating the 
design and operating effectiveness of internal control over financial reporting based on the assessed risk. 

We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis 
for our adverse audit opinion. 

Definition and Inherent Limitations of Internal Control Over Financlai Reporting 


An entity's internal control over financial reporting is a process effected by those charged with 
governance, management, and other personnel, designed to provide reasonable assurance regarding 
the preparation of reliable financial statements in accordance with [applicable ftnanciol reporting 
framework, such as accounting principles generally accepted in the United States of America], An entity's 
internal control over financial reporting Includes those policies and procedures that (1) pertain to 
the maintenance of records that, in reasonable detail a^urately and fairly reflect the transactions 
and dispositions of the assets of the entity; (2) provide reasonable assurance that transactions are 
recorded as necessary to permit preparation of financial statements in accordance with [applicable 
financial reporting framework, such as accounting principles generally accepted in the United States of 
America], and that receipts and expenditures of the entity are being made only in accordance with 
authorizations of management and those charged With governance; and (3) provide reasonable 
assurance regarding prevention, or timely detection and correction of unauthorized acquisition, use, 
or disposition of the entity's assets that could have a material effect on the financial statements. 

Because of its inherent limitations, Internal control over financial reporting may not prevent, or detect 
and correct, misstatements. Also, projections of any assessment of effectiveness to future periods are 
subject to the risk that controls may become inadequate because of changes in conditions, or that the 
degree of compliance with the policies or procedures may deteriorate. 


A material weakness is a deficiency, or a combination of deficiencies, in internal control 
reporting, such that there is a reasonable possibllitythat a material misstatement of the entity 


over financial 
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Forming Conclusbns and Reporting 





financial stat^ents will not be prevented^ or d^te^ed arid corrected, on a timely basiSifhe following 
material weakiiWs^ haibeen identified and included In the accompanying [tJf/e ofmanagemenf's,,^ . 
report] - -- 


Adverse Opinion 

Iri bur opinion, because of the effect of the material weakness described jn the Basos for Adverse 
Opinion paragraph on the achievernent of the objectives of [identify critenali ABC Company has not^ 
maintained efi^ective internal control over finaricia! reporting as of December 31,20XX; based on i i; 
[;c/ent/fycr/fer/(3]. - 

Report on Financial Statements 

We also have audited, in accordance with auditing standards generally accepted in the United States 
of America, the {identify financial statements] of ABC Company, and our report dated {date of report, 
which should be the same as the date of the report on the audit ofICFR] expressed [include nature of 
opinion]. We considered the mateH^ weakness Identified above In determining the nature, tirning, and 
extent of audit procedures applied in our audit of the 20XX financial statements, and this report does 
not alfect such report.on the financial statements. 


Report on Other Legal and Regulatory Requirements 

[Form and content of this section of the auditor's report will vary depending oh the nature of the auditor's 
other reporting responsibilities.] 

[Aud/for's s/gnafure] 

[Auditor's city and state] 

[Dgfe of f/jeaud/for's report] 







Sample Examination Report on (Annua*) MD&A When Reporting Directly on the Subject Matter, 

Not an Assertion 

Independent Accountant's Report 

We have examined ABC Company's Management's Discussion and Analysis taken as a whole, 
included (incorporated by reference) in the Company's (Insert description of registration statement 
or document). Management is responsible for the preparation of the Company's Management's 
Discussion and Analysis pursuant to the rules and regulations adopted by the Securities and 
Exchange Commission. Our responsibility Is to express an opinion on the presentation based on 
our examination. We have audited, in accordance with auditing standards generally accepted in the 
UnitedStatesof America, the financial statements of ABC Company as of December 31,20X3 and 
20X2, and for each of the years in the three-year period ended December 31,20X3, and in our report 
dated (Month and day), 20X4, we expressed an unqualified opinion on those financial stateihents. 

Our examination of Management's-Dfscusslon and Analysis was conducted in accordance with 
attestation standards established by the American Institute of Certified Public Accountants, and, 
accordingly, included examining, on a test basis, evidence supporting the historical amounts and 
disclosures In the presentation. An examination also Includes assessing the significant determinations 
made by management as to the relevancy of information to be included and the estimates and 
assumptions that affect reported information. We believe that our examination provides a reasonable 
basis for our opinion. 

The preparation of Management's Discussion and Analysis requires management to interpret the 
criteria, make determinations as to the relevancy of information to be included, and make estimates 
and assumptions that affect reported information. Management's Discussion and Analysis includes 
information regarding the estimated future impact of transactions and events that have occurred 
or are expected to occur, expected sources of liquidity and capita! resources, operating trends, 
commitments, and uncertainties. Actual results in the future may differ materially from management's 
present assessment of this information because events and circumstances frequently do not occur as 
expected. 

In our opinion, the Company's presentation of Management's Discussion and Analysis includes, in all 
material respects, the required elements of the rules and regulations adopted by the Securities and 
Exchange Commission; the historical financial amounts included therein have been accurately derived, 
in all material respects, from the Company's financial staternents; and the underlying information, 
determinations, estimates, and assumptions of the Company provide a reasonable basisforthe 
disclosures contained.therein. 

/s/CPA firm (signed by engagement partner) , - 

Date (usually the last day of fieldwork) ' 
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Not an Assertion 


Independent Accountant's Report 

We have reviewed ABC Company's Management's Discussion and Analysis taken as a whole, included 
in the Company's [insert description of registration statement or document]. Management is ' “ ;• 
responsible for the preparation of the Company's Management's Discussion and Analysis pursuant to 
the rules and regulations adopted by the Securities and Exchange Commission. We have reviewed, In . 
accordance with standards established by the American Institute of Certified Public Accountants, the , 
interirn financial information of ABC Company as of June 30,20X2 and 20X1, and for the three-month 
and six-month periods then ended, and have issued our report thereon dated July XX, 20X6. 

We conducted our review of Management's Discussion and Analysis in accordance with attestation 
standards established by the Americari Jhstitute of Certified Public Accountants. A review of 
Management's Discussion and Analy^s consists principally of applying analytical procedures and 
making inquiries of persons responsible for financial, accounting, and operational matters. It is 
substantially less in scope than an examination, the objective of which is the expressiori of an opinion 
on the presentation. Accordingly, we do not express such an opinion. 

The preparation of Management's Discussion and Analysis requires management to Interpret the 
criteria, make determinations as to the relevancy of information to be included, and make estimates 
and assumptions that affect reported information. Management's Discussion and Analysis includes 
information regarding the estimated future Impact of transactions and events that have occurred 
or are expected to occur, expected sources of liquidity and capital resources, operating trends, 
commitments, and uncertainties. Actual results In the future may differ materially from management's 
present assessment of this information because events and circumstances frequently do not occur as 
expected. 

Based on our review, nothing came to our attention that caused us to believe that the Company's 
presentation of Management's Discussion and Analysis does not include, in all material respects, the . 
required elements of the rules and regulations adopted by the Securities and Exchange Commission, 
that the historical financial amounts included therein have not befen accurately derived, in all material 
respects„from the Company's financial statements, or that the yndeVlying information, determinations, 
estimates, and assumptions of the Company do not provide a reasonable basis for the disclosures 
contained therein. 


This report is intended solely for the information and use of (list or refer to specified parties) and is not 
Intended to be and should not be used by anyone other than the specified parties. 

/s/CPAfirmfsigned by engagement partner) , . • - : ' 

Date (usually the last day of fieldwork) - ^ ‘ : ^ - 
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Account balances: 
four assertions for, 207-208,212 
opening balances—initial audits, 28'4-287 
tests of ending balances, 160 
Accounting, auditing vs., 76-77 
Accounting estimates, 123,184-185 
Accounting policies and practice, critical, 123 
Accounting principles: 
for members in business, 53 
for members in public practice, 11 
Accounting records, 163 
Accounts payable, 152, 221 
Accounts receivable, 212-213 
Activity ratios (turnover; efficiency ratios), 161 
Actuarial services, 45 
ADR (alternative dispute resolution), 24 
Adverse opinion: 
audit reports of, 275-276 
onlCFR, 405-406,481-482 
sample audit report, 324-325 
Advertising, by members in public practice, 16 
Advisory services for investments, 49 
Advocacy, by members in public practice, 10 
Affiliates, of members in public practice, 22-23 
Agreed'Upon procedures (AUP) engagement, 
442-446 
assertion for, 443 

on compliance attestation, 460-462 
documentation of, 444 

on prospective financial information, 452-453 
related to financial forecast, 452 
Agreed-upon procedures (AUP) report, 444-446 
on compliance, 475 
on forecasts, 470 

AlCPA, see American institute of Certified Public 
Accountants 

Alert to restrict the use of audit report, 297-298 
Alternative audit procedures, 183 
Alternative audit reports, 255 
Alternative dispute resolution (ADR), 24 
American Institute of Certified Public Accountants 
(AlCPA): 

assessing control risk under standards of, 131-134 
Clarified Standards, 77 
clarity and convergence project, 77,78 
Code of Professional Conduct, 2. See also Code of 
Professional Conduct 

Statements on Auditing Standards, 397-406 
Statements on Standards for Accounting and Review 
Services, 89 

Statements on Standards for Attestation 
Engagements, 89 

use of term GAAS and guidance associated with it, 80 
Analytical procedures, 106-107 
documenting, 178 
planning, 106-107 


and risk of material fraud, 109 
substantive, 159-162 

Applicable financial reporting framework: 
defined, 76 

reporting known departures from, 382 
Application controls, for IT (computer) auditing, 
247-248 

Application of accounting principles (second 
opinion) report, 337 

Application of requirements of framework reports, 
340-342 

Applied criteria, 301 
Appraisal services, 45 
Arm's-length transactions, 194 
ASB (Auditing Standards Board), 421 
Asserted claims, 188 
Assertions: 

for account balances, 207-208,212 

for agreed-upon procedures engagements, 443 

classification, 225-226 

completeness, 207,213,216,218, 220, 221,224, 225 
cutoff, 225 

for examinations, 427-428 

existence/occurrence, 207,212,214-215,218,220,221, 
224,225 

management assertion of internal control report, 476 
in obtaining audit evidence, 164-166 
for review engagement, 435-436 
rights and obligations. 207, 213,216, 219,220, 222-224 
valuation and allocation, 207-208, 212-213, 215, 
218-221,223,224 

Assurances, in comfort letters, 358,359 
Assurance levels, 89 
Assurance services, 467-468 
Attestation standards, 421-426 
Attest engagements, 89,421 
Attributes'sampling, 227,229-230 
Audits: 
ii^ial, 95-96 

level of assurance with, 89 
planning, see Planning activities 
preconditions for, 95 

that' are Ranged to review engagements, 386 
. Audit and professional engagement period, 55 
,Atidit committees, 44,123-125 

administration of engagement by, 60 
communications with, 199 
Audit documentation, 176-181 
ownership and custody of, 176 
purposes of, 176 
revisions to, 177 

Audit engagement team, 55-56 
Audit evidence, 159-225 
accounting estimates, 184-185 
accounts receivable, 212-213 
"assertions" in obtaining, 164-166 
audit documentation, 176-181 
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Audit evidence (continued] 
audit procedures, 167-169 
audit procedures for obtaining, 167 
cash, 209-211 
confirmations, 182-183 
current liabilities, 221-222 

evaluating misstatements identified during audit, 174-175 

fair value estimates, 186-187 

fixed assets, 220 

going-concern issues, 203-206 

inventory, 214-216 

investments in securities and derivative instruments, 
217-219 

lawyer's letters, 188-190 

long-term liabilities, 223 

management representations letters, 191-193 

of material misstatements, 137 

nature of, 163-166 

payroll, 225-226 

PCAOB Auditing Standard No. 15 on, 172-173 
related-party issues, 194-199 
stockholders' equity, 224 
subsequent events, 200-202 
substantive procedures, 167-169 
sufficient appropriate, 163-164 
Auditing: 

accounting vs., 76-77 
and assurance, 467 

purpose of and underlying premise of, 78-79 

Auditing Standards Board (ASB), 421 
Auditor's consent, 307 

Auditor's point estimate (auditor's range), 184 
Auditor's report: 

under AlCPA Clarified Standards, 86 
dating of, 202 
overview of, 85-88 
Auditor's specialists, 117-119 
Audit plan (audit program), 129 
Audit procedures, 167-169 
Audit process overview, 84 
Audit reports, 254-339 
adverse opinion, 275-276, 324-325 
alert to restrict report, 297-298 
application of accounting principles (second opinion), 
337 

in audits of group financial statements, 263-266 
consistency of financial statements, 280-283 
disclaimer of opinion, 277-279, 326 
emphasis-of-matter and other-matter paragraphs, 
267-269,329-332 

financial statements prepared on cash basis, 387 
financial statements prepared on regulatory basis (for 
genera! use), 388-389 

financial statements using another country's 
framework, 299-300 
incomplete presentation, 336 
interim financial information, 304-308 
introduction, 254-260 
opening balances—initial audits, 284-287 
other information along with financial statements, 
288-289 

qualified for inadequate disclosure, 323 


qualified for material misstatement, 321-322 
qualified for misstatement, 273-274,321-322 
qualified for scope, 319-320 
qualified for scope limitation, 270-272 
reference to component auditor, 333 
required supplementary Information, 292-293 
review report on interim financial statements, 339 
sample reports, 309-339 
single financial statement, 334 
specific element (special purpose framework), 335 
on summary financial statements, 301-303,338 
supplementary information related to financial 
statements, 290-296 

unmodified in current year, balance sheet in prior year, 
315-316 

unmodified in prior year, qualified in current year, 
317-318 

unmodified on B/S, disclaimer on I/S and cash flows, 
327-328 

unmodified opinion (no reference to legal 
requirements), 311-312 

unmodified opinion (reference to legal requirements), 
309-310 

unmodified opinion (sentence by sentence), 313-314 
Auditrisk, 103-105,170 
Audit risk model, 104,159-160 
AUP engagement, see Agreed-upon procedures 
engagement 

AUP report, see Agreed-upon procedures report 
Awareness letters, 307 

B 

Bank reconciliation review, 209-210 
Beneficial ownership, 25 
Beneficiary, 30 

Benefit plan administration, 45 

Blind trust, 30 

Bookkeeping services, 46 

Brokerage accounts, financial interest in, 31 

Business relationships, 58-59 

Business relationships, financial Interest in, 32-33 

Business risk consulting, 46 

c 

Cash, 209^.211 

Cash disbursements, internal control over, 152 
Cash revenue receipts, 150-151 
CFM (close family member), 55 
Chain of command, 56 
Changes in accounting principle, 280 
Checking account review, 210-211 
CIRAs (common interest realty associations), 
membership in, 40 
Clarified Standards, 77,255,370,421 
Clarity and convergence project (AlCPA), 77, 78 
Classification assertion, for payroll, 225-226 
Clients: 

current employment with/of, 36-37 
financial relationships of, 57-58 
litigation between member and, 40-41 
subsequent employment with, 38-39 
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Client shareholders, litigation by, 41 
Close family member (CFM), 55 
Close relatives, 34,35 

Code of Professional Conduct (AICPA), 2-54 
employment relationships, 36-37 
financial interests, 25-35 
introduction, 2 

members in public practice, 5-24 
MiPP independence rules, 20-24 
MIPP nonindependence rules, 7-19 
nonaudit services, 42-54 
preface, 2-4 
Combined report: 

on audited financial statements and compliance 
issues, 395-396 

on compliance with applicable requirements and 
interna! control over compliance, 368-369, 
on internal control and financial statements,477-478 
Comfort letters, 358-362 
Commissions, 14-15 

Common interest realty associations (CIRAs), 
membership in, 40 
Communication(s): 

with audit committees, 123-125,199 
offraud, 113-114 

required for internal control, 138-140 
with those charged with governance, 120-122,269 
Comparative financial statements, 256,386 
Compensation, 60 

Compensation plans, financial interest in, 27-28 
Competence, GAO standard for, 70 
Compilations: 

of forecasts, 471 
level of assurance with, 89 
Compilation engagements, 375-378 
Compilation report, on financial statements, 392 
Complementary user entity controls, 353 
Completeness assertion: 
for account balances, 207 
for accounts receivable, 213 
for current liabilities, 221 
for fixed assets, 220 
for inventory, 216 
for investments, 218 
for long-term iiabilities, 223 
for payroll, 225 
for stockholders' equity, 224 
Compliance, 115 
AUP for compliance report, 475 

combined report on audited financial statements and, 
395-396 

examination for compliance report, 474 

with requirements in financial statement audit report, 

349-352 

separate report on (no instances of noncompliance), 

393 

separate report on (with noncompliance identified), 

394 

Compliance attestation, 459-462 

agreed-upon procedures engagement in, 460-462 
examination engagements in, 459-462 
Compliance audit reports, 367-369 


Compliance with specified requirements, 459 
Component, 263 

Component auditor, 263. See also Reference to 
component auditor 
Computer auditing, see IT auditing 
Conceptual Framework (Code of Professional 
Conduct), 5,51-52 
Confidential Information, 16-17 
Confirmations, 182-183 
Conflicts of interest, 7-8 
Consistency of financial statements, 280-283 
Contingent fees, 14,59 
Continuing professional education (CPE), 71 
Controls: 
group-wide, 263 
tests of, 128,167,249-250 
Control deficiency, 138-140,407 
Control risk, 131-137 
Control risk (CR), 104 

Cooperative ventures, financial interest in, 32 
Corporate finance consulting, 47 
Coverage ratios (leverage ratios), 162 
Covered members, 20-21 
Covered persons, 55-56 
CPE (continuing professional education), 71 
CR (control risk), 104 
Credit union membership, 40 
Criteria for the preparation of pro forma financial 
information, 454 
Critical accounting estimate, 123 
Critical accounting policies and practice, 123 
Current employment, independence and, 36-37 
Current iiabilities, 221-222 
Cutoff assertion, for payroll, 225 
Cutoff test, 213 

D 

Database systems/structures, 251 
Deficiency in design, 138,407 
Deficlenc)^ operation, 138,407 
Defined benefit plans. 28 
Department of Labor (DDL), 72-73 
Depository accounts, financial interest in, 31 
Derivative investments, 217-219 
Design, deficiency In, 138,407 
Designated accounting standard setter, 292 
DetectionTisk(DR), 104 
Difference estimation, 233, 237-238 
Differences of opinion, on quality control, 83 
Direct assistance, Internal audit function for, 142 
Directfinancial interest, 25 
Directorships, for members in public practice, 8 
Disbursements, in expenditures/disbursements 
transaction cycle, 152-154 
Disbursement services, 46 
Disclaimer of opinion, 270,277-279, 326 
Disclosure, 200 
Discreditable acts: 

by members in business, 53 
by members in public practice, 12-13 
by other members, 54 
Distributed systems, 251 
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Diversified mutua! funds, 27 
Documentation: 

for agreed-upon procedures engagements, 444 
audit, 176-181 

of communication with those charged with 
governance, 121 

for compilation engagements, 378 
of engagement quality review, 93 
of examinations, 427-428 
of fraud, 113-114 
GAO standard for, 70 
of internal audit function, 142-143 
of material misstatements, 136,137 
PCAOB Auditing Standard No. 3 on, 180-181 
of preparation engagements, 374 
of quality control policies/procedures, 83 
of review engagement, 437 
of review engagements, 382 
of verbal responses to auditor's inquiries, 191 
DOL (Department of Labor), 72-73 
DR (detection risk), 104 
Due care principle, 3 

E 

EBP (employee benefit plans), 30,72 
Effective date of registration, 307 
Efficiency ratios (activity ratios), 161 
Electronic commerce, 252 
Emphasis*of>matter paragraphs, 267-269 
in audit reports, 267-268,281 
sample audit report, 329-330 
Employee benefit plans, 416-420 
audit considerations for, 417-418 
under ERISA, 416-417 
limited-scope engagements for, 418-420 
pension plans, 417 
welfare plans, 417 

Employee benefit plans (EBP), 30,72 
Employee Retirement income Security Act of 1974 
(ERISA), 416-417 
Employee search services, 47 
Employment relationships, 36-37 
current employment, 36-37 
DOL guidelines on, 72 
other associations and relationships, 40-41 
Securities and Exchange Commission on, 58 
subsequent employment, 38-39 
Ending balances, tests of, 160 
Engagements: 
acceptance of, 301, 304 

in application of requirements of framework reports, 
340-341 

for audits of single F/S and specific elements, accounts, 
or items, 346 

PCAOB Auditing Standard No. 10 on supervision of, 171 
performance of, 304-305 
planning of, 84,94-98 
types of, 89 

Engagement contractual terms, 24 
Engagement letters, 24,96-98 
Engaging party, 424 
Entertainment, 8,40 


ERISA (Employee Retirement income Security Act of 
1974), 416-417 

Estates, financial interest in, 29-30 
Estimation uncertainty, 184,185,187 
Ethics codes. See a/so Code of Professional Conduct 
Department of Labor independence rules, 72-73 
Government Accountability Office, 64-71 
and Sarbanes-Oxley and PCAOB, 61 -63 
Evidence-gathering procedures, 249-250 
Examination, 427-434 

of annual MD&A when reporting directly on subject 
matter, not on management's assertion, 465 
assertions for, 427-428 
for compliance, 474 
of compliance attestation, 459-462 
documentation of, 427-428 
of financial forecast, 450 
of financial projection, 451 
of forecast, 469 
of MD&A, 463-465,483 
modified reports of, 433 

of pro forma financial information, 454-457,472 
of prospective financial information, 447-452 
unmodified reports of, 431 -433 
Executive search services, 47 
Existence/occurrence assertion: 
for account balances, 207 
for accounts receivable, 212 
for current liabilities, 221 
for fixed assets, 220 
for inventory, 214-215 
for investments, 218 
for long-term Habllities, 223 
for payroll, 225 
for stockholders' equity, 224 
Expenditures/disbursements transaction cycle, 
152-154 

External confirmation, 182 

F 

Fair value estimates, 186-187 
Family relationships, independence and, 34-35 
Fees, 14-15,24,59 
Financial accounting, 76-77 
Financiaiforecasts: 
agreed-upon procedures report on, 452 
AURf>f forecast report, 470 
..odomfort letter comments on, 359 
• compilation of forecast report, 471 
defined, 447 

examination of forecast report, 469 
examination report on, 450 
Financial information, DOL guidelines on, 72 
Financial interests, 25-35 
brokerage accounts, 31 
business relationships, 32-33 
depository accounts, 31 
employee benefit plans, 30 
family relationships, 34-35 
insurance policies, 31 
leases, 32 
loans, 32 
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mutual funds, 27 
overview, 25 

partnerships and LLCs, 29 
retirement plans, 27-28 
Section 529 plans, 29 
trusts and estates, 29-30 
unsolicited, 26 

Financial projection, 447,451 
Financial relationships: 

of clients, 57-58 

Securities and Exchange Commission on, 56-57 
Financial reporting: 

effectiveness of interna! control over, 410-412 
fraudulent, 108 

Financial reporting framework, 76 

of another country, 299-300 
application of requirements of framework report, 
340-342 

special purpose, 343-345 

Financial reporting oversight role (FROR),.55 
Financial statements: 

combined report on compliance issues and, 395-396 
combined report on internal control and, 477-478 
compilation report on, 392 
consistency of, 280-283 
consistency of, audit report on, 280-283 
interim, sample review report on, 339 
other information along with, audit reports of, 288-289 
preparation engagements for, 373-374 
prepared on cash basis, report on, 345,387 
prepared on regulatory basis (for general use), audit 
report on, 388-389 
review report on, 391 
single, audit report of, 334 
with special purpose frameworks, 343-345 
summary, audit reports on, 301-303,338 
supplementary information related to, in audit reports, 
290-296 

using another country's framework, audit report, 
299-300 

Financial statement audits, 76-89 
and accounting vs. auditing, 76-77 
auditor's reports on, 85-88 
audit process for, 84 
and engagement types, 89 
Generally Accepted Auditing Standards, 78-79 
principles underlying, 78-79 
professional standards for, 80-81 
quality control standards for, 82-83 
Firm names, 18-19 
Fixed assets, 220 
Fixed assets cycle, 158 
Forecasts, see Financial forecasts 
Forensic accounting services, 48 
Form of organization, 18 
Fraud, 108-114 
communication of, 121-122 
detecting, 108-112 

evaluation and communication of, 113-114 
and proof of cash, 211 
Fraud riskfactors, 109-112 
FROR (financial reporting oversight role), 55 


G 

GAAS, see Generally Accepted Auditing Standards 
GAGAS (Generally Accepted Government Auditing 
Standards), 363-366 

GAO, see Government Accountability Office 
General controls (IT auditing), 245-246 
Generally Accepted Auditing Standards (GAAS), 
78-80,82,256 

Generally Accepted Government Auditing Standards 
(GAGAS), 363-366 

General partnerships, financial interest in, 29 
General standards, for members in public practice, 10 
Gifts, 8,40 

Going concern issues, 121,178, 203-206 
Government Accountability Ofiice (GAO): 
independence rules of, 64-71 
Yellow Book, 363,365 

Government auditing report standards, 363-366 
Grantor, 30 
Group, 263 

Group financial statements, 263-266 
Group-vi/ide controls, 263 

H 

Hardware, 251 

Hierarchical database structures, 251 
Historical cost principle, 194 
Hypothetical transaction, 340 

I 

ICFR (internal control over financial reporting), 
397-412 

IFM (immediate family member), 34-35,56 
illegal acts: 

communication of, 121 
detecting, 115-116 

Immediate family member (IFM), 34-35,56 
Income, reporting, 9 
Incomplete presentation report, 336 
inconsistency, 288 

Independence rules (AlCPA MIPPs), 20-24 
alternative dispute resolution, 24 
-engagement contractual terms, 24 
introduction to, 20-21 
networkfirms and affiliates, 22-23 
rdssued reports, 24 
unpaid fees, 24 

Independence rules (GAO), 64-71 
Independence rules (PCAOB), 61-63 
Indirect financial interest, 25 
Individual audit areas, 207-226 
accounts receivable, 212-213 
cash, 209-211 
current liabilities, 221-222 
fixed assets, 220 
inventory, 214-216 

investments in securities and derivative instruments, 
217-219 

long-term liabilities, 223 
payroll, 225-226 
stockholders' equity, 224 
Information systems services, 48 
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inherent risk(IR), 104 
initial audits, 95-96 
initial audit engagement, 284 
inquiry: 

about restrictions on cash balances, 211 
and risk of material fraud, 109 

Insurance policies, financial interest in, 31 
Integrated audits, 397-412 
Integrity principle, 3, 52 
Interim financial information: 
in audit reports, 304-308 
review report on, 305-308 
interim financial statements, review report on, 

339 

internal audit function, 141-143 
Internal audit services, 49 
internal controi(s), 126-140 
audit plan (audit program) development, 129 
in audit process, 84 
for cash, 150 

combined report on financial statements and, 
477-478 

communicating issues with, 122 

effectiveness over financial reporting. 410-412 

evaluation of, 128-130 

inherent limitations of, 129-130 

over cash disbursements, 152 

over purchases and accounts payable, 152 

for payroll, 155 

performing tests of controls, 128 
preliminary evaluation of, 128 
reevaluation of reliance on, based on tests of control, 
128 

required communications on, 138-140 
review phase for, 126-127 
for sales, 148 

"SCARE" framework, 146-147 
separate report on (management's assertion), 476 
standards for, 131-134 
transaction cycles, 146-158 
understanding of, 126-127 
Internal control over financial reporting (ICFR), 
397-412 

International auditing, 299-300 
International Standards on Auditing (ISAs), 83 
internet use, 252 
Interpretive publications, 371 
Inventory, 214-216 
Investing/financing cycle, 158 
Investment—advisory or management services, 49 
Investments in securities and derivative instruments, 
217-219 

IR (inherent risk), 104 

tSAs (International Standards on Auditing), 83 
IT (computer) auditing, 245-252 
application controls, 247-248 
evidence-gathering procedures, 249-250 
general controls, 245-246 

J 

Joint closely held investments, financial 
interest in, 33 


K 

Kiting, 210 

L 

Lawyer's letters, 188-190 

Leases, financial interest in, 32 

Legal and regulatory framework, 115 

Legal contingencies, audit procedures related to, 188 

Letter of inquiry to legal council, 188 

Leverage ratios (coverage ratios), 162 

Limited liability companies (LLCs), 29 

Limited partnerships, 29 

Limited-scope audit engagements, 418-420 

Liquidity ratios (solvency ratios), 161 

Litigation: 

actual or threatened, 40-41 
by client security holders, 41 
and letter of inquiry to legal council, 188 
third-party, 41 

LLCs (limited liability companies), 29 
Loans, financial interest in, 32 
Long-term liabilities, 223 

M 

Management, 120 

Management assertion of internal control report, 

476 

Management report (with no material weaknesses 
reported), 401-403,476 
Management representations letters, 191-193 
Management's discussion and analysis (MD&A), 
463-466 

examination of MD&A report, 483 
review of MO&A report, 484 
Management services for investment, 49 
Management's point estimate, 184 
Management's specialists, 117 
Materiality, 101-102,171 
Material misstatement: 
correctidn of, 281 
due to fraud, 108 

PCAOB Auditing Standard No. 12 on, 171-172 
'PCAOB Auditing Standard No. 13 on, 172 
responding to risk of, 183, 354 
risk qt-103-104.135-137 
Material noncompliance, 459 
Material weakness, 138,407,413-415 
Mb&A, see Management's discussion and analysis 
Mean-per-unit (MPU) estimation, 234,241-242 
Members in business, 51-53 
Members in public practice (MIPPs), 5-24 
independence rules for, 20-24 
nonindependence rules for, 7-19 
Misappropriation of assets, 108,110-111 
Misstatement(s), 174. See also material misstatement 
adverse opinion for, 275 
aggregated, documenting, 178 
of fact, 288-289 

identified during audit, evaluating, 174-175 
qualified audit report for, 273-274, 321 -322 
tolerable, 101,102 
uncorrected, 174-175 
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Modified opinion: 
defined, 270 

on examination reports, 433 
on review reports, 440 

MPU (mean-per-unit) estimation, 

234, 241-242 

Mutual funds, financial interest in, 27 

N 

Name, firm, 18-19 
NAS, see Nonaudit services 
Negative confirmation request, 182-183 
Networks, 251-252 
Network firms, 22 
Nonaudit services (NAS), 42-54 
appraisal, valuation, or actuarial, 45 
benefit plan administration, 45 
bookkeeping, payroll, and other 
disbursements, 46 
business risk consulting, 46 
code provisions for, 42-44 
corporate finance consulting, 47 
executive or employee search, 47 
forensic accounting, 48 
GAO guidelines for, 67-70 
information systems, 48 
internal audit, 49 

investment—advisory or management, 49 
members in business, 51-53 
other members, 54 
under Sarbanes-Oxley Act, 43-44 
Securities and Exchange Commission on. 59 
tax services, 50 

Nonindependence rules (MIPPs), 7-19 
accounting principles, 11 
advertising, 16 
advocacy, 10 

confidential information, 16-17 
conflicts of interest, 7-8 
directorships, 8 
discreditable acts, 12-13 
fees, 14-15 
firm names, 18-19 
form of organization, 18 
general standards, 10 
gifts and entertainment, 8 
reporting income, 9 
subordination of judgment, 9 
third-party service providers, 10 
Non-participant party, 442 
Nonstatistical sampling, 227,228 

o 

Objectivity and Independence principle, 3,52 
Opening balances, 284 

Opening balances—initial audits, in audit reports, 

284-287 

Operation, deficiency in, 138,407 
Other information, 288-289 

Other information along with financial statements, 
audit reports of, 288-289 

Other information constituting audit evidence, 163 


Other-matter paragraphs, 267-269 
in audit reports, 268-269 
sample audit report, 331-332 
Other members: 
defined, 54 

discreditable acts by, 54 
Other preparation, compilation and review 
publications, 371 

Outcome of an accounting estimate, 184 

P 

Partial presentation, 447 
Partner rotation, 59 
Partnerships: 
financial interest in, 29 
as form of organization, 18 
Payroll cycle, 155-156 
Payroll services, 46,225-226 

PCAOB, see Public Company Accounting Oversight Board 
PCAOB Auditing Standards, 77 
No. 1 References in Auditors'Reports to the Standards of 
the (PCAOB), 26^-262 
No. 3 Audit Documentation, 180-181 
No. 4 Reporting on Whether a Previously Reported 
Material Weakness Continues to Exist, 413-415 
No. 5 An Audit of Internal Control Over Financial 
Reporting That Is Integrated with an Audit of Financial 
Statements, 407-412 

No. 6 Evaluating Consistency of Financial Statements, 
282-283 

No. 7 Engagement Quality Review, 92-93 
No. 8 Audit Risk, 170 
Ho. 9 Audit Planning, 170-171 
No. lOSuperWsion ofthe Audit Engagement, 170,171 
No. 11 Consideration of Materiality in Planning and 
Performing an Audit, 102,170,171 
No. M Identifying and Assessing the Risks of Material 
Misstatement, 170-172 

No. 13 The Auditor's Responses to the Risks of Material 
Misstat^ent, 170,172 
No. Evaluating Audit Results, 170,172 
No. )S Audit Evidence, 170,172-173 
Na 16 Communications With Audit Committees, 

123-125 

No. 17 Auditing Supplemental Information 
Accompanying Audited Financial Statements, 

'294-296 

Related Parties, 197-199 
Pension plans, 417 
Performance materiality, 101 
Petty cash, 211 
Planning activities, 94-100 
PCAOB Auditing Standard No. 9 on, 170-171 
pre-engagement, 94-98 
and supervision, 99-100 
Positive confirmation request, 182 
PPS (probabiiity-proportional-to-size) sampling, 
234-236,243-244 
Preconditions for an audit, 95 
Predecessor auditor, 284 
Pre-engagement planning, 94-98 
Prepaid tuition plans, financial interest in, 29 
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Preparation of financial statements engagements, 

373-374 

PrimePius/ElderCare services, 468 
Principles for auditing, 78-79 
Probability-proportional-to-size (PPS) sampling, 

234-236, 243-244 

Production/manufacturing inventory cycle, 157-158 
Professional engagement period, 55 
Professional judgment standard (GAO), 70 
Professional services, 397-484. See also Audit reports; 

Financial statement audits; Nonaudit services 
agreed-upon procedures engagements, 442-446 
assurance services, 467-468 
attestation standards, 421-426 
auditing empioyee benefit pians, 416-420 
AUP for compliance report, 475 
AUP of forecast report, 470 
combined report on t/C and F/S, 477-478 
compilation of forecast report, 471 
compliance attestation, 459-462 
examination for compliance report, 474 
examination of forecast report, 469 
examination of MD&A report, 483 
examination of pro forma report, 472 
examinations, 427-434 

management's discussion and analysis, 463-466 
pro forma financial Information, 454-458 
prospective financial information, 447-453 
review engagement, 435-437 
review of MD&A report, 484 
review of pro forma report, 473 
review reports, 438-441 
sample reports, 469-484 

separate report on I/C (management's assertion), 476 
Professional standards, 80-81. See also Standards; 

individual standards 
Profitability ratios, 161-162 
Profit participation report, 390 
Pro forma adjustments, 472,473 
Pro forma financial information, 383-384,454-458 
examination or review engagements on, 454-455 
review reports on, 456-458 
Proof of cash, 211 

Prospective financial information, 447-453 
agreed-upon procedures engagements on, 452-453 
examination engagements on, 447-452 
SSARSon,385 

Prospective financial statements, see Financial 

forecasts 

Public Company Accounting Oversight Board 

(PCAOB), 61-63. See also PCAOB Auditing Standards 
audits outside jurisdiction of, 256,260 
independence and ethics rules of, 61-63 
risk assessment audit standards of, 170-173 
Public Interest principle, 3 
Purchases, internal control over, 152 


Qualified audit opinion, 270 

for inadequate disclosure, 323 
for material misstatement, 321-322 
for review reports, 439-440 


for scope, 319-320 
for scope limitation, 270-272 
Quality control: 

GAO. 71 
SEC, 60 

Quality control standards, 82-83,92-93 

R 

Ratio estimation, 233-234, 239-240 
Reasonable period of time, 203 
Reaudit, 284 

Records, categories of, 12-13 

Reference to component auditor, 265-266, 333 

Referral fees, 14-15 

Registration, effective date of, 307 

Reissued reports: 

by members in public practice, 24 
by predecessor auditor, 201-202 
Related parties, 194-199 
Relational database structures, 251 
Reports, 340-393. See also Audit reports 
of agreed-upon procedures engagements, 

444-446 

on application of requirements of framework, 
340-342 

in audit process, 84 

combined, on audited financial statements and 
compliance issues, 395-396 
comfort letters, 358-362 
compliance audits, 367-369 
on compliance with requirements in financial 
statement audit, 349-352 

financial statements with special purpose frameworks, 
343-345 

government auditing standards for, 363-366 
profit participation, 390 
review engagements, 391 
sample reports, 387-396 
separate compliance report (no instances of 
noncpmpllance), 393 

separate compliance report (with noncompliance 
identified), 394 

^ service organizations—service auditors, 355-357 
service organizations—user auditors, 353-354 
single fipancial statements and specific elements, 
accounts, or items, 346-348 
SSARs-^compilation engagements, 375-378 
,.;SSARs—general principles, 370-372 
- ' SSARs—other topics, 383-384 

SSARs—preparation of financial statements, 373-374 
SSARs—review engagements, 379-382 
when using another country's framework, 299-300 
Reporting accountant, 340 
Reporting income (MiPPs), 9 
Required supplementary information, 292-293,384 
Responsibilities principle, 3 
Responsible party, 424 
Restricted reports, 297-298 
Restrictions on cash balances, 211 
Retirement pians, financial Interest in, 27-28 
Revenue receipts-cash transaction cycle, 150-151 
Revenue receipts-sales transaction cycle, 148-149 
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Reviews: 

level of assurance with, 89 
ofMD&A, 484 
of pro forma report, 473 
Review engagements, 435-437 
assertion for, 435-436 
changing audit engagements to, 386 
documentation of, 437 
ofMD&A, 466 

on pro forma financial information, 454-455 
sample report, 391 
SSARS on, 379-382, 386 
Review report, 438-441 
on financial statements, 391 
on interim financial information, 305-308 
on interim financial statements, 339 
modified, 440 

on pro forma financial information, 456-458 
qualified, 439-440 
unmodified, 438-439 
Rights and obligations assertion: 
for account balances, 207 
for accounts receivable, 213 
for current liabilities, 222 
for fixed assets, 220 
for inventory, 216 
for investments, 219 
for long-term liabilities, 223 
for stockholders' equity, 224 
Risk: 

control, 131-137 

fraud risk factors, 109-112 

of material misstatement, 135-137 

of materia! misstatement, responding to, 183, 

354 

nonsampling, 228 

PCAOB Auditing Standard No. 13 on material 
misstatement, 172 
sampling, 227-228 

Risk assessment: 

PCAOB Auditing Standard No. 12 on, 171-172 
PCAOB standards, 170-173 
of related-party issues, 194-195,197-198 
Risk assessment procedures, 131-137,167 
Risk-based audit approach, 184-186 
Risk of material misstatement (RMM), 103-104 

s 

Safeguards, 5, 20 
Sales, internal control for, 148 
Sales revenue receipts, 148-149 
Sampling, 227-244 
attributes, 227,229-230 
example problems, 237-244 
introduction, 227-228 
probability-proportional-to-size, 234-236, 
243-244 

variables, 227,231-234 
Sampling risk, 227-228 

Sarbanes-Oxley Act of 2002 (SOA, SOX), 61,90-91 
on employment with clients, 39 
on nonaudit services, 43-44 


overview of, 90-91 

PCAOB responsibilities under, 90. See also PCAOB 
Auditing Standards 

SASs, see Statements on Auditing Standards 
Savings plans, financial interest in, 27-28 
SCARE framework, 146-147 
for cash, 150-151 

for expenditures/disbursements, 153-154 
for payroll, 155-156 

for production/manufacturing inventory cycle, 

157-158 

for sales, 148-149 
Scope, 319-320 

Scope and Nature of Services principle, 3 
Scope limitation, 270-272,277 
Section 529 plans, financial interest In, 29 
Securities Act of 1933,307-308 
Securities and Exchange Commission (SEC), 55-60 
on audit clients' financial relationships, 57-58 
on audit committee administration, 60 
on business relationships, 58-59 
on compensation, 60 
on contingent fees, 59 
on employment relationships, 58 
on financial relationships, 56-57 
on non-audit services, 59 
on partner rotation, 59 
on quality controls, 60 
Securities investments, 217-219 
Service auditors, 353,355-357 
Service Organization Control (SOC) Reports, 

356-357 

Service organizations, 251,353 
service auditors report, 355-357 
user auditors report, 353-354 
Significant component, 263 
Significant deficiency, 138,407 
Single Audit Act of 1984,364 
Single financial statement reports: 
sample audit report, 334 

single financial statements and specific elements, 
accounts, or items, 346-348 
SOA* see Sarbanes-Oxley Act of 2002 

Social club memberships, 40 

SOC (Service Organization Control) Reports, 

356-3^7 
Software, 251 

Solvency ratios (liquidity ratios), 161 
SOX, see Sarbanes-Oxley Act of 2002 
Specialists, using work of, 117-119,216 
Special purpose frameworks: 
report on financial statements with, 343-345 
review reports when using, 381-382 
Specific element (special purpose framework) report, 
335 

Specific transaction, 340 
Specified party, 442 

SQCS, see Statements on Quality Control Standards 

SSAEs (Statements on Standards for Attestation 
Engagements), 89 

SSARS, see Statements on Standards for Accounting and 
Review Services 
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Standards. See also specific standards, e.g.: Generally 
Accepted Auditing Standards (GAAS) 
ethical, see Ethics codes 
internal control, 131-134 
professional, 80-81 
quality control, 82-83 
role of, 76-77 

Standard unqualified audit report, 85-86,254-255. 

See also Unmodified auditor's report 
Statements of Standards for Attestation 
Engagements (SSAEs), 421 

Statements on Auditing Standards (SASs), 80,83,367, 

407 

Statements on Quality Control Standards (SQCS), 

82-83,93,94 

Statements on Standards for Accounting and Review 
Services (SSARS), 89 
compilation engagements, 375-378 
genera! principles, 370-372 
preparation of financial statements, 373^74 
pro forma financial information, 383-384 
prospective financial information, 385 
required supplementary information, 384 
review engagements, 379-382,386 
supplemerital information, 384 
Statements on Standards for Attestation 
Engagements (SSAEs), 89 
Statistical sampling, 227,228 
Stockholders' equity, 224 
Subordination of judgment, 9 
Subsequent changes, 359 
Subsequent employment, independence and, 

38-39 

Subsequent events, 200-202,386 
Subsequently discovered facts, 201,386 
Subservice organizations, 353 
Substantive procedures, 84,167 

audit risk model, 159-160 
in obtaining audit evidence, 167-169 
overview of, 159-162 

Summary financial statements, 301-303,338 
Supervision, and planning, 99-100 
Supplemental Information: 

PCAOB Auditing Standard No. 17 on, 294-296 
SSARS on, 384 

Supplementary information related to financial 
statements: 

in audit reports, 290-296 
fairly stated, 290-291 
required information, 292-293 

T 

Tax services, 50 
Technical knowledge (GAO), 70 
Terms of engagement, 94-96 
Tests of controls, 128,167, 249-250 
Tests of ending balances, 160 
Tests of transactions, 160 
Third-party litigation, 41 
Third-party service providers (TSPs), 10 
Those charged with governance, communication 
with, 120-122, 269 


Threats, 5 

for members in business, 51-52 
for members in public practice, 20 
Tolerable misstatement, 101,102 
Trade association memberships, 40 
Transactions, tests of, 160 
Transaction cyclefs), 146-158 
expenditures/disbursements, 152-154 
fixed assets, 158 
investing/financing, 158 
payroll, 155-156 

production/manufacturing inventory, 157-158 
revenue receipts—cash, 150-151 
revenue receipts—sales, 148-149 
Trusts, financial interest in, 29-30 
Trust services, 467-468 
TSPs (third-party service providers), 10 
Turnover (activity ratios), 161 
Type 1 report, 353 
Type 2 report, 353 

u 

Unasserted claims, 188-189 
Uncertainty, audit sampling and, 227-228 
Uncorrected misstatements, 174-175 
Undiversified mutual funds, 27 
Unmodified auditor's reports: 
under AlCPA Clarified Standards, 87 
under AlCPA Clarified Standards (including reference 
to legal and regulatory requirements), 259-260 
under AlCPA Clarified Standards (sentence by 
sentence), 88,258 

under AlCPA Clarified Standards (without reference to 
legal and regulatory requirements), 257 
including reference to legal requirements, 259-260, 
309-310 

with no reference to legal requirements, 257,311-312 
sentence by sentence, 88,258,313-314 
unmodified in current year, balance sheet in prior year, 
315-ai6 

unmodified in prior year, qualified in current year, 317-318 
unmodified on B/5, disclaimer on I/S and cash flows, 

, '^327-328 

unmodified on financial position (due to inability to 
verify.opening inventory), 327-328 
Unmodified opinions: 

' on exarninatlon reports, 431-433 
ICFR, 403-404,477-480 
' on review reports, 438-439 
Unpaid fees (MIPPs), 24 

Unqualified audit reports, 85-86. See also Unmodified 
auditor's report 

Unsolicited financial interests, 26 

User auditors (service organizations), 353-354 

User entity, 353 

V 

Valuation and allocation assertion: 
for account balances, 207-208, 212-213 
for accounts receivable, 212-213 
for current liabilities, 221 
for fixed assets, 220 
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Vatuation and allocation assertion {continued) 
for inventory, 215 
for investments, 218-219 
for long-term liabilities, 223 
for stockholders' equity, 224 
Valuation services, 45 
Variables sampling, 227,231-234 
Vouchers payable, 154, 221 


W 

Welfare plans, 417 
"Whistleblowing," 114 
Working paper files, 178-179 

Y 

Yellow Book (GAO), 363,365 
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